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Opening an office in Beijing or Moscow? 
Beware of local vendors that offer name- 
brand software at deep discounts, because 
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Users Remain Loyal to 
Novell Despite Turmoil 


Vendor sets layoff plans, names operations 


chief, looks to focus on high-growth markets 


BY MATT HAMBLEN 
Novell Inc. went back into re- 
structuring mode last week, 
announcing a series of moves 
that included a 600-worker 
layoff, the promotion of its top 
sales executive to also run de- 
velopment and marketing, and 
a plan to concentrate its re- 
sources on high-growth mar- 
kets such as Linux. 

The software vendor also is 
looking at selling its Celerant 
Consulting unit, which would 
largely undo its 2001 acquisi- 


Belated SQL Server U 


Microsoft launches 
new database release 
after two-year delay 


BY ERIC LAI AND 
HEATHER HAVENSTEIN 


Microsoft Corp. is finally set 
to launch its SQL Server 2005 
database today. And despite a 
two-year delay, several users 
who have tested the software 
cited the improved perfor- 
mance and new functionality 
it brings as positive develop- 
ments that likely will convince 
them to upgrade soon. 

For example, beta tester 
Mayur Raichura, managing di- 
rector of information services 
at The Long & Foster Cos. in 
Fairfax, Va., said he is “hoping 
that with the five years they 


| tion of Cambridge Technc 


Partners. Novell said it plans 
to retain a separate IT con- 
sulting group that focuses on 
work involving the company’s 
own products. 

Despite the onslaught of re- 
structuring actions, 10 
longtime Novell cus- 
tomers said they were 
taking the develop- 


| ments largely in stride 


| 
| 
| 
| 


after having weatnered 
earlier management 
transitions and busi- 


rade 
Retains Its Appeal to Testers 


have spent developing and 
tightening this product, this 
is truly not a 1.0 version.” 
Raichura added that he wants 
to avoid the need for “some 
serious patch management” or | 
deployment of service packs. 
But he said that based on 
the features he has tested so 
far in the beta version, SQL 
Server 2005 could rival the 
SQL Server, page 51 
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ness downturns at the vendor 


in recent years. 


ux software had taken a bigger 

share of the Linux market by 

now. And some are worried 

that the planned layoffs could 

hit the Novell sales reps and 

software developers they 
work with. 

But all of the users 
said they remain loyal 
to Novell’s products 
and the company’s 
Linux-driven strategy. 

“Even with the lay- 

Novell, page 16 


Laws, Breaches 
Lend Urgency to 
Retail Security 


BY JAIKUMAR VIJAYAN 
CHICAGO 

Growing privacy concerns 
and emerging laws governing 
the use of sensitive personal 


| information are increasing the 
| pressure on retailers to make 

| sure that their data security 

| practices are rock 
| cording to IT managers at a 


solid, ac- 


conference here last week. 
They added that an inability 
to demonstrate due diligence 
on security could expose com- 
panies to serious reputational 
damage, financial losses and 
increased customer churn. 
Brian Kilcourse, a former 
retail industry CIO who is 
now a consultant at Retail 
Systems Alert Group Inc. in 
Security, page 16 





How does Xerox Global Services manage millions of office devices for its customers? 


Their largest application runs on new SQL Server™ 2005 64-bit running on Windows 


Server™ 2003, which provides 99.999% uptime* See how at microsoft.com/bigdata 
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The Power to Know why other BI vendors have arrived too late. 


WANT PROOF? 


Check out our Web site 
to learn why analysts 
and customers agree: 


SAS Business Intelligence 
is fast, simple, consistent 
and accurate. 


While other vendors are playing catch-up — by just now introducing their BI approaches — SAS continues to 
lead the way in the business intelligence market. When you consider investing in or upgrading your current 
BI software, talk to SAS about our proven successes. 

e Unmatched Enterprise Intelligence Platform 

e Nearly 30 years of BI experience 

e Undisputed leader in business analytics 

« More than 4 million users at over 40,000 locations worldwide 

» At work in 94% of FORTUNE Global 500° companies 


t www.sas.com/sasBi « 


§SaS. | Fis. 
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Dirty Data Blights the Bottom Line 


in the Technology section: Although it’s a problem 
that’s often overshadowed by sexier issues, poor 
data quality costs companies a lot of money. 
Here’s what some are doing about it. Page 23 
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Moving Pictures 

In the Technology section: Mobile video 
is a reality for consumers, especially in 
Asia, and it shows promise as a busi- 
ness application — but not for the near 
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Thin-client approaches 
diverge, as Hewlett-Packard 
rolls out blade PCs and Sun 
Microsystems works with 
Wyse on server-based clients. 


HP wins the bidding for the 
Interex member database and 
says it will protect the person- 
al data of its customers. 


Bank of America plans to begin 
updating its service-oriented 
architecture, which will be 
based on IBM’s IFW informa- 
tion architecture blueprint. 


A federal commission recom- 
mends a nationwide patient 
authentication system to 
speed the adoption of elec- 
tronic health records. 


Q&A: Standard Chartered 
Bank IT security chief John 
Meakin says the bank can 
manage risks by prioritizing 
the patching of key systems. 


Children’s Hospital in Boston 
turns from problematic tape 
backup procedures to disk-to- 
disk technology. 


) Microsoft will ship upgraded 
CRM apps ahead of schedule, 
looking to make up for the 
cancellation of an earlier ver- 
sion last spring. 


Global Dispatche 
agrees to buy mobile network 
operator O2 PLC; Qualcomm 
disputes charges of unfair 
pricing practices in Europe. 


Telefonica 


Sun’s ITB tape drive is the 
first fruit of its purchase of 
StorageTek. 


30 Future Watch: Can You Un- 
derstand Me Now? Voice 
applications such as interac- 
tive voice response are finally 
ready to live up to their 
promise. 


32 Geek’s Garden. This week, 
we highlight the lowdown on 
space elevators, the first pro- 
grammer and a discovery 
that’s likely to make quantum 
computing more feasible. 


34 Security Manager’s Journal: 
How to Get a Job in the Info- 
sec Field. CJ. Kelly’s readers 
wrote to ask her where the IT 
security jobs are, so she did a 
little research. 
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39 China Syndrome. Some of the 


hottest spots in the global 
marketplace are the worst 
offenders when it comes to 
technology counterfeiting. If 
your company has worldwide 
operations, you’re especially 
vulnerable. Here’s how to 
minimize your risk. 


42 Double Dipping on Sarb-Ox. 
No doubt about it: Complying 
with the Sarbanes-Oxley Act 
can be pricey. But with cre- 
ativity and foresight, some 
companies are getting a lot 
more out of their compliance 
budgets. 


46 Career Watch. A young main- 
framer sees infinite opportu- 
nities; the loss of tech jobs 
continues; and why women 
pursue careers in IT. 


future. Page 28 





OPINIONS 


6 On the Mark: Mark Hall Mark Hall 
reports on one vendor exec’s 
view that relying on program- 
ming heroes to save founder- 
ing app-dev projects is a sign 
that the development process 
is immature. 


20 Don Tennant doesn’t condone 
software piracy, but he does 
recognize that the big U.S. 
software makers helped foster 
a predisposition to it. 


20 Bruce A. Stewart has ideas 
for making life more interest- 
ing during cautious IT times. 


David Moschella sees a need 
for corporate IT to ask the sorts 
of questions that business peo- 
ple routinely ask themselves. 


36 Jian Zhen says IT administra- 
tors can make root-cause 
analysis more efficient by 
using full-text indexed 
Boolean search. 


48 Paul Glen offers advice on 
how to minimize the angst of 
firing a subordinate. 


Frankly Speaking: Frank 
Hayes thinks it’s good when 
users develop their own apps, 
because when IT steps in to 
fix them up, they already 
know what users want the 
things to do. 
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QuickPoll Results 


Are you satisfied with your 
raise this year? 


@ iake this week's QuickPoll at wwew.computerworld.com 
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Grooming Future Ci0s 


CAREERS: Korn/Ferry International’s Mark 
Polansky discusses the importance of identi- 
fying and developing the CIOs of the future 
and offers some tips. @ QuickLink 57634 


Preserving Log Data Integrity 


SECURITY: As federal record-keeping regula- 
tions mushroom, it’s increasingly important 
to save and secure your log data in case it’s 
needed by auditors — or for a day in court. 
Columnist Jian Zhen outlines the steps for 


keeping unaltered logs. @ QuickLink 57958 


Middieware Primer 

SOFTWARE: It’s not just esoteric back-end 
plumbing anymore. This downloadable 
Executive Briefing will help you get the most 
out of enterprise-class middleware in your 
organization. @ QuickLink a7420 
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AT DEADLINE 


Oracle CFO to Leave 
After Four Months 


Oracle Corp. lost a second chief 
financial officer this year with the 
resignation of Greg Maffei. In a 
statement, CEO Larry Ellison said 
Maffei is leaving for “a terrific 
professional opportunity.” The 
former Microsoft Corp. executive 
joined Oracle in late June to re- 
place Harry You, who resigned af- 
ter eight months as CFO to be- 
come CEO of BearingPoint Inc. 


Cisco Discloses 
Router App Flaw 


Cisco Systems Inc. has published 
a patch for a flaw in its Internet- 
working Operating System, which 
powers its routers. The flaw, rated 
“critical” by the French Security 
Incident Response Team, affects 
the IOS timers that run some sys- 
tem tasks. Under certain condi- 
tions, the flaw can allow attack- 
ers to take control of a router and 
then use the system timers to run 
malicious code. 


Veritas Deal Blamed 
For Symantec Loss 


Symantec Corp. stumbled in its 
second quarter, reporting a large 
loss on charges associated with 
its Veritas Software Corp. acqui- 
sition. Symantec also warned that 
the results in the current quarter 
will be worse than projected. 
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EDS Plans to Resell 
Fujitsu Servers 


Electronic Data Systems Corp. 
has reached an agreement with 
Fujitsu Ltd. to resell Fujitsu’s Ita- 
nium 2-based PrimeQuest servers 
and other hardware as part of its 
service packages. Over the next 
three years, Fujitsu hopes to sell 
2,000 servers via EDS, one-fifth 
of the systems’ expected total 
sales. EDS will also offer Fujitsu’s 
Stylistic and LifeBook tablet PCs. 
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HP Sun Take Different 
Paths With Thin Clients 


HP rolls out blade 
PCs; Sun works on 
server-based clients 


BY PATRICK THIBODEAU 


UN MICROSYSTEMS Inc. 
| data centers are similar. Both 


and Hewlett-Packard 

Co. are each offering 

new thin-client com- 
puting technologies, but 
they’re giving users different 


| choices: server-based clients 


versus ones that are supported 
by rack-mounted blade PCs. 

HP today plans to start ship- 
ping blade PCs equipped with 
a version of Advanced Micro 
Devices Inc.’s Athlon proces- 
sor developed for the new sys- 
tems. The devices replace a 
line of desktop blades based 
on Transmeta Corp.'s Efficeon 
processor. HP put sales of 
those models on hold in Janu- 
ary, when Transmeta said it 
would stop making Efficeon. 

Sun, which offers the Sun 
Ray line of thin clients, last 
week announced a deal under 
which thin-client market 
leader Wyse Technology Inc. 
will bundle its devices with 
software that Sun acquired 
when it bought Tarantella Inc. 
in July. 

The software, called Secure 
Global Desktop, lets thin 





| clients access applications on 


a variety of systems, including 
ones running Windows, Linux 
or Unix. 

The business arguments for 
moving to either server-based 
thin clients or blade PCs in 


technologies promise IT cost 
reductions through more cen- 
tralized systems management 
and reduced desktop support 
needs. But that’s where agree- 
ment ends among users and 
among vendors. 

Michael Sexton, director 
of IT at Princeton Resorts 
Group LLC in Phoenix, is 
supporting about 200 of his 
end users with Wyse thin 
clients attached to servers 
that run the company’s Win- 
dows and terminal server 
applications. Blade PCs aren’t 
attractive to him because 
they’re more complicated 


Projected growth in world- 
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a" | don’t have 
200 CPUs 
that can go bad, [or] 
400 sticks of RAM. 
| only have nine 


MICHAEL SEXTON, DIRECTOR OF IT, 
PRINCETON RESORTS GROUP LLC 


to support than the Wyse 
devices are, he said. 

“I don’t have 200 CPUs that 
can go bad, [or] 400 sticks of 
RAM,” Sexton said. “I only 
have nine servers.” 

But Roger Neal, IT director 
at Duncan Regional Hospital 
in Duncan, Okla., advocates 
the use of blade PCs. He has 
installed blade devices devel- 
oped by ClearCube Technolo- 
gy Inc. to support more than 
220 end users. 

Blade PCs “are going to con- 
tinue to grow [in performance 
and functionality] as fast as 
the normal desktop, and I 
think that is a little bit of an 
advantage” over server-based 
thin clients, Neal said. Blades 
also require less-specialized 
skills within IT than server- 
based thin clients, which may 
need employees with Citrix 
training, he added. 





www.computerworld.com 


HP’s Athlon-based blades 
will support one user per de- 
vice and provide a standard 
corporate desktop image that’s 
indistinguishable from what 
users would get on a desktop 
PC, said Tad Bodeman, direc- 
tor of client consolidation 
solutions at HP’s personal 
systems group. 

One of the reasons HP went 
with the Transmeta chip was 
its relatively low power use, 
with each blade using about 25 
watts, but HP says the AMD 
chip is similar. 

In addition to the Windows- 
based blade PCs, HP offers a 
range of server-based thin 
clients that support a variety 
of operating systems. Similar- 
ly, Sun and Wyse said that 
embedding the Secure Global 
Desktop software in a thin 
client will allow the device to 
deliver applications from any 
source via a network server. 

Blade PCs are “not really a 
solution in a heterogeneous 
environment” because they 
usually rely on Windows, said 
Greg Wolff, director of desk- 
top infrastructure software 
at Sun. 

One certainty is that inter- 
est in thin clients among cor- 
porate users is increasing, said 
Bob O’Donnell, an analyst at 
IDC. Thin clients, whether 
they’re running off a blade PC 
or a server, currently account 
for just over 3% of all corpo- 
rate desktops, according to 
O’Donnell. By 2009, that fig- 
ure is expected to increase to 


about 8%, he said. @ 58003 





HP Wins Bidding for Interex’s Member Data 


Vendor says it will 
protect information 
collected on users 


BY PATRICK THIBODEAU 
Hewlett-Packard Co. was 
the high bidder for the now- 
defunct Interex user group’s 
customer database and mail- 
ing list, which were auctioned 
off late last month in a sale 
sanctioned by a bankruptcy 
court judge in California. 

HP offered $66,500 for the 
database and mailing list, top- 





ping two other bidders. Legal 
documents detailing the result 
of the bidding process were 
filed last Monday in U.S. Bank- 
ruptcy Court for the Northern 
District of California. 

By purchasing what are, in 
effect, the records of its own 
customers, HP sees itself as 
being akin to a white knight. 

The company wouldn’t 
comment on how it plans to 
use the information, but HP 
spokesman Don Gentile said 
the Interex data is being pur- 
chased “to ensure that the pri- 





vacy of our customers would 
not be compromised.” 
Sunnyvale, Calif.-based In- 
terex filed for Chapter 7 bank- 
ruptcy protection in August 
after closing its operations in 
July and canceling its annual 
HP World conference. HP 
World faced new competition 
from a technical conference 
launched by HP this year. 
The user group shut down 
after incurring about $4 mil- 
lion in debt, and the sale of 
the customer database and 
mailing list by the court- 





appointed trustee overseeing 
Interex’s remaining assets was 
designed to help pay off its 
creditors. 

The bidding process began 
after Redmond, Wash.-based 
Genisys Corp., which sells re- 
furbished HP hardware, of- 
fered to buy the database for 
$15,000 [QuickLink 57541]. 
Trustee Carol W. Wu then 
conducted an auction-style 
sale after receiving competing 
bids from HP and a third bid- 
der that wasn’t identified in 
the court papers. @ 57999 
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Bank of America Ready to 


NEWS 


Begin Work on SOA Update | 


System expansion 
needed for surge 
in transactions 


BY HEATHER HAVENSTEIN 

Bank of America Corp. plans 
to soon begin work on the 
third generation of its service- 
oriented architecture to sup- 
port an expected doubling of 
Web services transactions 
from its current 550 million 
per month. 





Kazmaier said the IFW will 
allow Bank of America to map 
business requirements, such as 
automating the entire proce- 
dure of opening new accounts, 
into a business process that is 
blueprint, to integrate applica- | linked using Web services. 
tion processes. | “That is a real-world exam- 

Bank of America is still ple of a reference model [that] 
negotiating with IBM for an | fully describes those steps and 
enterprise license, said Kim | defines services interfaces for 
Kazmaier, senior integration the steps,” he said. “Without 
architect at the Charlotte, a reference architecture, you 


N.C.-based bank. can spend an inordinate 


The next-generation SOA, 
expected by the third quarter 
of next year, will use IBM’s In- 
formation FrameWork (IFW), 
a set of business models and 
an information architecture 





Federal Panel Pushes 
Plan for EHR Adoption 


Sends Congress 
14 proposals 


BY JAIKUMAR VIJAYAN 
A federal commission late last 


month called for a national pa- | 


tient authentication system to 
enable faster adoption of elec- 
tronic health records (EHR). 

The Commission on Sys- 
temic Interoperability, estab- 
lished by the Medicare Mod- 
ernization Act of 2003, also 
proposed creating financial 
incentives to help convince 
health care providers to adopt 
an EHR plan and recommend- 
ed the abolition of regulations 
that may hinder the adoption 
of the technology. 

In a report submitted to 
Congress on Oct. 25, the com- 
mission listed 14 recommen- 
dations focused on three areas: 
adoption challenges, interop- 
erability of health care data 
and secure connectivity be- 
tween networks. The commis- 
sion’s charter ended Oct. 31. 

The report highlights the 
challenges in implementing a 
connected system of instantly 
accessible health records, said 
Robert Seliger, chairman of 
the Chicago-based Healthcare 
Information and Management 
Systems Society’s steering 


tional privacy standard based 
on the federal Health Insur- 
ance Portability and Account- 
ability Act, Wallace said. 

“On the adoption side, we 
focused on the need for finan- 
cial incentives” for health care 
providers, Wallace said, ac- 
knowledging that an EHR sys- 
tem offers more benefits to 
other groups. In fact, he said, 
consumers and insurance 
companies are the biggest 
potential beneficiaries of a 
connected health care system. 

Sam Karp, chief program 
officer at the California 
HealthCare Foundation, an 
Oakland-based nonprofit 
organization focused on im- 
proving health care in the 
state, noted that there is little 
immediate incentive for 
providers to support EHR. 

“By far the biggest hurdle 
is cost, which is why there 
has been very little adoption 
so far” beyond large health 
care providers that can afford | 
it, he said. 

“This is still a developing 
market,” Karp said. “Physicians | 
who are being asked to make a 
significant capital outlay on 
systems want to be assured 
that the investments they are 
making will be sound.” 

The commission also recom- 
mended using product certifi- 
cation, interoperable data 
standards, and standard prod- 
uct identifiers and vocabulary | 
to ensure that health care data 
is accessible as needed. 


committee on integration and 
interoperability. 

Though there have been 
calls over the past several 
years to make patient informa- 
tion more easily accessible to 
providers and patients, cost is- 
sues, security and privacy con- 
cerns, and a lack of interoper- 
ability have been major stum- 
bling blocks to implementa- 
tion, said Seliger, also CEO of 
Sentillion Inc., an Andover, 
Mass.-based vendor of identi- 
ty management technologies. 


Overcoming Roadblocks 
The commission’s recommen- 
dations aim to overcome such 
roadblocks, said Scott Wallace, 
chairman of the commission 
and president of The National 
Alliance for Health Informa- 
tion Technology, a Washing- 
ton-based organization that 
promotes the use of IT sys- 
tems in health care. 

For instance, a Social Secu- 
rity-type identification system 
could be used by physicians to 
quickly get data on individual 
patients, Wallace said. 

A patchwork of privacy laws 
in different states also poses a 
challenge to the implementa- 
tion of EHR, Wallace said. To 
address that problem, the 
commission proposed a na- 


| amount of time and energy 


building and maintaining that 
holistic view of the process.” 
The bank plans to begin us- 
ing IFW by the end of this 
year to map out new standard 
processes within its SOA that 
can cross customer channels 
such as online banking and 


| call centers. By next Septem- 


ber, Kazmaier said, he expects 
the bank to have added to pro- 
duction 20 to 30 Web services 
using IFW. 

The new SOA mode! will 
build on the current second- 


| generation system, which is 


based on the integration plat- 
form of Fairfax, Va.-based 
WebMethods Inc. and inte- 


grates existing applications. 


Government programs and 
departments focused on health 
care IT efforts: 


® American Health Information 
Community: Established in June 
2005 by Department of Health 
and Human Services Secretary 
Mike Leavitt to develop common 
standards for electronic health 
records. 


= Agency for Healthcare Re- 
search and Quality: Originally 
created in 1989; reauthorized in 
1999 to sponsor projects that are 
focused on a range of health care 
IT projects, including EHR. 
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= Center for Medicare and 
Medicaid Services: Supports 
several initiatives involving health 
care IT, including a project that 
provides primary care physicians 
with information on more than 60 
private EHR systems. 


aeee 


Karp said those recommen- 
dations are helpful because of 
the current lack of product 
standards. 

Not long before the com- 
mission’s charter ended, U.S. 
Health and Human Services 
Secretary Mike Leavitt formed 
the American Health Informa- 
tion Community to provide 
recommendations on how to 
make health records digital 
and interoperable while en- 
suring the privacy and securi- 


ty of those records. @ 57998 
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Bank of America now has 
about 100 Web services that 
integrate 1.8 billion customer 
interactions per month occur- 
ring online, in call centers and 
branches, and at ATMs. 

For example, Web services 
support all voice response for 
call centers, as well as money 
transfers and transaction his- 
tories for online banking. 

Using IFW, the bank expects 
to more quickly develop new 
Web services at a lower cost 
while also forging closer ties 
between IT and the business, 
Kazmaier added. 

“The business talks about 
how they can increase rev- 
enue by improving customer 
service,” he said. “The busi- 
ness can communicate what 
their requirements are, and we 
can show the business what 


the process would be.” 


ESB on the Way 


Bank of America also plans to 
deploy an enterprise service 
bus (ESB) as part of the next- 
generation SOA to help it 
monitor Web service compli- 
ance with service-level 
agreements. The bank is still 
gathering requirements for the 
ESB it will select for the proj- 
ect. Kazmaier declined to pro- 
vide details about those plans. 

Bank of America launched 
its first SOA in 1998 with a 
middleware message-oriented 
system using the Java Message 
Service standard and IBM 
MQSeries middleware. 

In 2001, as the bank was 
preparing to roll out a new 
J2EE-based customer interac- 
tion system, it began using 
XML and Web services to in- 
tegrate existing applications 
into the new system. 

In 2002 and 2003, bank offi- 
cials replaced the first-genera- 
tion SOA with WebMethod’s 
platform, which provides Web 
services adapters to integrate 
customer data over multiple 
channels. 

Bank of America and Wells 
Fargo Bank are among the 
biggest users of SOA technol 
ogy in terms of the number 
and quality of Web services 
they have in production, said 
Jason Bloomberg, senior ana- 
lyst at ZapThink LLC in Cam- 
bridge, Mass. @ 57997 
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Dell Revenue to Fall 
Short of Guidance 


Dell Inc. said it will take a charge 
of $450 million after third-quarter 
results fell short of projections 
because of lower-than-expected 
sales. Dell said it will take the 
charge to restructure its workforce 
and replace broken OptiPlex desk- 
top systems. Third-quarter rev- 
enue is expected to be $13.9 billion 
versus the earlier projection of 
$14.1 billion to $14.5 billion. Dell 
will report its earnings Thursday. 


Sun Sales Are Up, 
But Losses Persist 


Despite some bright spots, with 
improved sales of its Opteron- 
based server line and midrange 
storage arrays, Sun Microsystems 
Inc. reported another net loss for 
its first fiscal quarter. 


SUN BY THE NUMBERS 
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Case Resigns From 
Time Warner Board 


America Online Inc. co-founder 
Steve Case has resigned from 
Time Warner Inc.’s board of direc- 
tors. Case is leaving Time Warner 
to devote more time to Revolution 
Health Group, an investment 
company he launched in April 
with stakes in health care and 
hospitality businesses. Case 
remains a major Time Warner 
shareholder. 


AMD, IBM Extend 
Technology Pact 


Advanced Micro Devices Inc. has 
expanded a chip technology part- 
nership with IBM to include ex- 
ploratory research into a range of 
advanced chip-related technolo- 


gies through 2011. The agreement | 


was set to expire in 2008. It calls 
for the companies to collaborate 
on the development of new tran- 
sistor, interconnect, lithography 
and die-to-package connection 
technologies. 


“aoe! 
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IT’s ‘Hero Culture’ 
Stunts Growth. . . 


. . of mature application development processes. Many IT 


shops expect their top programmers to save the day 
on foundering app-dev projects, says Erik Frieberg, 
vice president of marketing and strategy at Borland 
Corp. in Scotts Valley, Calif. But that only shows how 


immature 
their soft- 
ware devel- 
opment 
processes 
are, Frieberg 
argues. He 
contends that 
an “IT hero 
culture” con- 
tributes to 
the continuing failure of proj- 
ects in the eyes of end users 
because coding saviors often 
come late to a project and 
aren’t immersed in the busi- 
ness requirements. His evi- 
dence? An annual report from 
The Standish Group Interna- 
tional Inc. that says 66% of IT 
projects last year were per- 
ceived to have failed in some 
way. “Business users tend to 
remember the initial require- 
ments, while IT recalls what 
was agreed to after the pro- 
ject was scaled back,” 
Frieberg says. To help im- 
pose project discipline, IT 
should use application 
life-cycle management 
(ALM) technology, 

Frieberg suggests. Microsoft 


FRIEBERG 
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Corp. and IBM have such of- 
ferings, but Frieberg hopes 
you'll consider his company’s 
wares. In next year’s first 
quarter, Borland plans to up- 
date Core Analyst, one of its 
ALM tools. New features will 
include improved project sto- 
ryboarding techniques de- 
signed to better show how 
data flows through a new ap- 
plication, as well as a refresh 
of rapid prototyping features. 


Boost your WAN’s 
pokey performance... 
. .. by installing data accelera- 
tion appliances. Richard 
Pierce, CEO of Orbital Data 
Corp. in San Mateo, Calif., 
says the “demand profile” 
for WAN optimization has 
changed from point-to-point 
needs to servicing numerous 
branch offices that access 
multiple data centers. That 


m 


Orbital 6800 speeds up WAN traffic. 





shift means WAN op- 
timization technology 
has to account for the 
constant flux in net- 
work traffic, he says. 
Lucky for you, Pierce 
claims his company’s 
new Orbital 6000 ap- 
pliance family with 
automatic optimiza- 
tion software can detect spe- 
cific compression and accel- 
eration techniques needed by 
applications. For example, he 
says, Windows users bogged 
down by Microsoft’s chatty 
Common Internet File Sys- 
tem should get a performance 
lift from Orbital’s predictive 
prefetching scheme, which 
grabs next-in-line data before 
the application requests it. 
Available this week, the Or- 
bital 6800 handles data rates 
of up to 1Gbit/sec. and starts 
at $21,000; the 6500 works at 
up to 45Mbit/sec. and is 
priced from $5,000. 


Endpoint security 
software... 

... checks up on PCs and other 
devices trying to get on a net- 
work. McAfee Inc. plans to re- 
lease a beta of its Policy En- 
forcer software by the end of 
the month and ship the prod- 
uct early next year. According 
to Michelle Cobb, a group 
product manager at McAfee, 
the tool can check more than 
400 security parameters on 
computers before they access 


| your network, ensuring that 


the machines meet policies 
on everything from operating 
system patches to antivirus 
software. You'll also need 
McAfee’s ePolicy Orchestra- 
tor, which Cobb claims has 
already been installed by 
30,000 customers. 


The corporate share of 


wireless data... 

... Services remains flat, as 
consumers continue to domi- 
nate the airwaves. A report 
being released this week by 
Boston-based Yankee Group 
Research Inc. predicts that 





HOT TECHNOLOGY TRENDS, NEW PRODUCT 
NEWS AND INDUSTRY BUZZ BY MARK HALL 
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Global users of 
wireless voice 
Fes e-] 
Ta ech 
2009, says 
SUL GcRC tm 


the enterprise 

portion of wireless 
data services will bare- 
ly budge by 2009, from 
9.8% of the total this 
year to 9.9%. “Business 
users still like voice,” 
says Yankee analyst 
Keith Mallinson. And, 
not surprisingly, the 
report indicates that by 2009, 
the lion’s share of new wire- 
less voice subscribers — 41% 
— will be in China and India. 
But Mallinson notes that 
while the number of wireless 
voice users in India will more 
than double in the next five 
years, it will amount to only 
14.5% of the population, com- 
pared with more than 90% 
saturation in many European 
countries. 


Military-grade security 
tool is destined . . . 

... for use on thin clients. Ed 
Hammersla, CEO of Trusted 
Computer Solutions Inc. in 
Herndon, Va., says his compa- 
ny has signed a nonexclusive 
deal to port its NetTop2 data 
access software to Wyse 
Technology Inc.’s thin-client 
devices. With NetTop2, 
which is in beta testing, gov- 
ernment ana- 
lysts and 
contractors 
who use the 
Wyse de- 
vices will be 
able to ac- 
cess multiple 
classified 
databases 
and applica- 
tions from a 
single thin client. Hammersla 
says the users currently need 
dedicated terminals for each 
data source. NetTop2 will 
work on systems that are 
running secure versions of 
Linux based on the National 
Security Agency’s Security- 
Enhanced Linux technology. 
That will include Red Hat 
Enterprise Linux Version 5 
when it ships next year, Ham- 


mersla says. @ 57965 
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Bank Moves to Prioritize 
Patching of Key Systems 


BY JAIKUMAR VIJAYAN 
HE CONSTANT NEED 
to patch systems on 
its global network 
has driven 

Standard Chartered 

Bank to adopt a risk- 

based approach to man- 

aging security vulnerabilities. 

Instead of rushing to patch 

every flaw disclosed by its soft- 

ware vendors, the London- 
based bank plans to identify the 
most pressing problems and 
prioritize its responses based 
on the value of the IT assets at 
risk. John Meakin, group head of 
information security at Stan- 
dard Chartered, discussed the 
bank’s strategy with Comput- 
erworld late last month. 


What's driving this whole effort? 
Deploying patches across a 
global network is a big chal- 
lenge. Given that we have al- 


C7 





ready invested in automated 
[patch] distribution [and] that 
we think we have a very effi- 
cient way of capturing the 
initial information 
about a vulnerability 
and a patch, we were 
looking to see what 
other scope we had of making 
this problem less intractable. 


How have you gone about doing 
that? We really have said the 
only way of solving this prob- 
lem is to truly target where 
we deploy patches and when. 
Clearly, some of the servers on 
our network are more impor- 
tant than others in terms of 
the impact on our business. 
Equally, some of those servers 
are subject to a greater likeli- 
hood of any vulnerability on 
them being exploited. By mea- 
suring these two factors 
across the whole asset inven- 





tory on our network, we’re 
able to know which of our 
high-value boxes are most 
exposed when new patches 
are released. 


How big a challenge has it been? 
It’s very simple, very logical 
and very easy [conceptually]. 
But actually doing it is a chal- 
lenge in itself. First of all, it 
presupposes that you have a 
very accurate asset inventory. 
We've already made some in- 
vestments on our network 
which have given us the begin- 
nings of that asset inventory. 
Secondly, we have made in- 
vestments in tools which scan 
for the existence of vulnerabil- 
ities. The third piece of the 
puzzle, as an add-on to asset 
inventory, is a measure of just 
how valuable each box is, 
based on the data and the ap- 
plication that it supports. 








Children’s Hospital Trims 
Backup With Disk-to-Disk 


Now urgent restore 
requests are met in 
minutes, not hours 


BY LUCAS MEARIAN 
Children’s Hospital in Boston 
was dealing with a tape back- 
up nightmare early this year, 
with a backup window that at 
times lasted 18 hours and often 
caused failed tape drives and 
shutdowns. 

On top of at least two drive 
failures each month, the slug- 
gish 30-to-40MB/sec. data 
transfer speeds guaranteed 
that the backup window for 
some 300 servers would con- 
tinue to grow. 

“The backup windows just 
kept growing and growing,” 
said Paul Scheib, director of 
operations and chief informa- 
tion security officer at Chil- 
dren’s Hospital. “There were 
so many problems at night that 


backups were being missed.” 

Scheib added that IT per- 
sonnel found it difficult to de- 
termine the cause of the tape 
problems. 

To fix the snags, the hospi- 
tal first tried a disk-to-disk 
backup system in January by 
launching a pilot program us- 
ing virtual tape library (VTL) 
technology as an intermediary 
between its Fibre Channel 
storage-area network (SAN) 
and two tape libraries. 


Going With Plan B 

Scheib said his staff quickly 
determined that the pilot was 
not working as hoped, forcing 
the hospital to try something 
else. “We had a lot of trouble 
getting [the pilot system] con- 
figured correctly,” he said, 
noting that it required that 
the Fibre Channel SAN be 
integrated with the VTM 
technology from Melville, 


NY.-based FalconStor Soft- 
ware Inc. 

The hospital changed paths 
in June, installing a disk-to- 
disk backup system using 
DD460 disk arrays from Data 
Domain Inc. in Palo Alto, 
Calif. The new backup system 
runs on an Ethernet network 
that doesn’t include the Fibre 
Channel SAN. 

The DD460 arrays cost 
about $75,000 apiece, Data 
Domain said. 

Scheib said the new disk 
arrays doubled data transfer 
rates, cutting three hours from 
the hospital’s daily backup 
window, cutting failures in 
half and accelerating restores 
from hours or days to minutes. 

The disk-based backup 
technology lets the hospital 
keep about three months of 
backup data online, nearly 
eliminating off-site tape re- 
calls for data restores, Scheib 
said. The response time for 
urgent restore requests has 
been reduced from four hours 
to a few minutes, and the new 
system enabled the hospital to 








The last piece of the picture is 
the ability to model, in a re- 
peatable way, how easy it is for 
a vulnerability on a particular 
box to be exploited. If you add 
this piece, all of a sudden what 
was once an impossible task 
becomes a more possible task. 


How effective has the risk-based 
strategy been in helping you deal 
with vulnerabilities? We haven’t 
finished this yet. We’ve taken 
the risk-driven approach over 
a period of the last two to 
three years. We started focus- 
ing our efforts by scanning for 
where the vulnerabilities are, 
and certainly we have de- 
ployed our proprietary risk in- 
ventory in order to target the 
work of patching. Going for- 
ward, we’re adding this final 
threat-modeling piece. 


But you'll still be patching all of 
your systems, right? Exactly. 

We would have a patch cycle 
where we first deal with 
value-high/exposure-high 
systems, then value-medium/ 
exposure-high, value-medium/ 


exposure-medium and so on. 
ss The backup 

window just 
kept growing and 
growing. There were 
so many problems 
at night that back- 
ups were being 
missed. 


PAUL SCHEIB, DIRECTOR OF OPERA- 
TIONS AND CHIEF INFORMATION SECU- 
RITY OFFICER, CHILDREN’S HOSPITAL 


eliminate one of its Hewlett- 
Packard Co. tape libraries, 
he noted. 

Scheib said he backs up 
about 60TB a week to his 
three DD460 disk arrays using 
Symantec Corp.’s Veritas Net- 
Backup 4.5 software. 

So far, the new system has 
worked flawlessly, he said. 

Tony Asaro, an analyst at 
Enterprise Strategy Group Inc. 
in Milford, Mass., said he was 
surprised that the pilot VTL 
system didn’t work out for the 
hospital, because such sys- 
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We'll leave the low-value/ 
low-risk systems until we have 
a regular software release. 


How easy has it been getting busi- 
ness managers to participate in 
the process of rating the risks to 
systems? Not easy. I would 
still say that we get 50-50 di- 
rect perticipation of business 
users. Sometimes it’s a busi- 
ness-aligned IT guy who is 
engaged in the evaluation 
process. 

The process itself is sort of 
self-correcting and is really 
quite sensitive to overvalua- 
tion. If I walk into one of our 
[business unit] head’s office 
and ask him how valuable a 
system is, his natural reaction 
is to say “high.” What we’ve 
found gets better business in- 
volvement is when we go back 
and say to them, “OK, you’ve 
gone through this valuation 
process and come out with a 
5 for confidentiality, integrity 
and availability. You do real- 
ize that means you've got to 
make the maximum invest- 
ment in securing those sys- 
tems?” @ 57980 


tems are relatively easy to in- 
stall and usually run well. 

Asaro did say that networks 
incorporating Fibre Channel 
SANs can be harder to config- 
ure and that VTL technology 
can be more difficult to use 
than Ethernet-based disk-to- 
disk technologies. 

Overall, disk-to-disk tech- 
nology is not without its draw- 
backs, according to some ana- 
lysts and users. 

Jerome Wendt, a senior in- 
formation systems analyst at a 
large Midwest data-processing 
firm, has experienced prob- 
lems integrating some tradi- 
tional backup software with 
disk-to-disk backup technology. 

“I know there are issues 
with [IBM’s] Tivoli Storage 
Manager, where it doesn’t 
recognize every virtual tape 
library interface presented to 
it,” Wendt said. 

Scheib said that he hasn’t 
yet run into any issues with 
his Data Domain technology 
and plans on further reducing 
his dependency on tape. 

@ 57996 
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Mercury Execs 
Resign in Scandal 


Three Mercury Interactive Corp. 
executives - CEO Amnon Landan, 
Chief Financial Officer Douglas 
Smith and General Counsel Susan 
Skaer - have resigned after an 
internal probe into stock-option 
grants resulted in a scathing re- 
port on their accounting over- 
sight. President and Chief Operat- 
ing Officer Tony Zingale was 
named CEO, replacing Landan, 
who joined the firm in 1989 and 
became CEO in 1997. 


Nortel Blames Q3 
Loss on Penalty. . . 


Nortel Networks Corp., citing 
restructuring costs and a penalty 
stemming from a refiling of its tax 
returns, reported a loss for its 
latest fiscal period. 


REVENUE  (PROGER/EOSS! 
03°05 [$278] (Siu) 
cco 


... As New CEO, 
Motorola Settle 


New Nortel CEO Mike Zafirovski 
has agreed to repay $11.5 million 
of separation money to former 
employer Motorola Inc. to settle a 


lawsuit filed last month after Nor- 


tel announced his hiring. Nortel 
will reimburse Zafirovski for the 
payment. He also agreed not to 
recruit Motorola employees. 
Motorola had sought to prevent 
Zafirovski from working at Nortel 
for two years and block him from 
hiring its employees. 


Investors Sell 
Agilent Business 


Chip developer PMC-Sierra Inc. 
has agreed to buy the storage 
semiconductor business formerly 
owned by Agilent Technologies 
Inc. for about $425 million. PMC- 
Sierra is acquiring the business 
from investment firms Kohiberg 
Kravis Roberts & Co. and Silver 
Lake Partners, which bought Agi- 
lent’s chip business in August. 





Users hope new 
product addresses 


| v1.2 shortcomings 


BY MARC L. SONGINI 
ICROSOFT CORP. 
last week said its 
long-awaited 
CRM 3.0 upgrade 

will ship early next month, 

weeks earlier than planned. 

The product was originally 


| slated to ship during the first 


quarter of 2006. 

Microsoft said the release 
adds a number of features to 
its predecessor, Version 1.2, 


| including the ability to be cus- 


tomized without extensive 
programming and stronger in- 
tegration with the Outlook 
personal information manager. 
In July, the company had dis- 
closed that the hosted CRM 3.0 
version would be sold using a 
subscription-based pricing for- 
mat, which potentially mini- 
mizes the risks in deploying 





_ NEWS 


| CRM, according to Microsoft. 


Users interviewed last week 
said they hope the new release 
can address the shortcomings 
of Version 1.2. 

Michael Kruger, information 
systems manager at Designer 
Doors Inc. in River Falls, Wis., 
said he plans to give CRM 3.0 
“a long and critical evaluation” 
in hopes that it corrects some 
of the deficiencies in Version 
1.2. Designer Doors currently 
runs CRM 1.2 for limited func- 
tions to support customer ser- 
vice operations, he said. 

Kruger said the evaluation 
process will begin next month 
and will likely last at least 
three months. “We are hoping 
to get from 3.0 what was 
promised with 1.0 — a collabo- 
rative sales tool that ties to- 
gether our sales force with our 
customer service and allows 


| all customer information to 


reside in one searchable loca- 
tion,” he said. 
Because of glitches in syn- 


Microsoft Exec Weighs In on CRM 3.0 


Brad Wilson, general manager 
of Microsoft's CRM unit, talked to 
Computerworld’s Marc L. Songini 
about the release of the compa- 
ny's long-awaited CRM 3.0 soft- 
ware, which it said last week will 
ship in early December, 

a few months earlier than 
expected. Wilson also 

explained why Microsoft 

jumped from Version 1.2 

to 3.0, and he provided 

some details on the size 

of the company's CRM 

business. 


Why did you push up 
shipments of CRM 3.0 from 
early next year to early next 
month? We had said we'd finish 
sometime in the first quarter of 
2006. We finished coding back 
in May, and we just finished test- 
ing and everything else [last] 
Monday. 


Microsoft's CRM software pro- 
ceeded from Version 1.2 to 
3.0. What happened to Version 
2.0? We had initially planned to 
release 2.0 in the spring of this 
year. But [our] partners and cus- 
tomers said, “This is a good 
q release, but it could be a 
game-changing release if 
you went back and did 
some additional work.” We 
decided to put some more 
time in the development 
cycle and add some cus- 
tomer platform flexibility to 
make it easier to develop 
customized and vertical applica- 
tions around CRM. 


What are some of the features 
added after deciding to cancel 
Version 2.07 [Version 3.0] has 
the ability to add new objects 
with no coding, and it's fully 
upgradable and portable. 





Microsoft CRM Upgrade 
To Ship Ahead of Schedule 


Microsoft CRM 3.0 


«Follow-on to CRM 1.2 


= To be available as a service 
via subscription 


= Tight integration with Office 


» Customizable without 
recoding 


= Ships in early December 


chronizing data in mobile sys- 
tems in CRM 1.0 and 1.2, De- 
signer Doors removed the ap- 
plication from the desktops of 
its sales force. Those workers 
now use Outlook to support 
the sales process. 

Bernard McMahon, chair- 
man of Sheffield, England- 
based venture capital and 
business services provider 
Just Good Business, said his 
company uses Microsoft’s 
CRM software both internally 
and to assist clients. 


How did you accomplish this? 
Microsoft CRM is a very modern 
application, built in the last four 
to five years with a Web services 
architecture. You can automati- 
cally generate a new object and 
make that object live and work in 
the system. Before, it would have 
required a lot more coding to cre- 
ate customer objects. 


How big is Microsoft's CRM 
business? We grew 100% last 
year and [foresee] a fast growth 
rate going forward. We have five 
and a half thousand customers 
now, with 150,000 [end] users. 


How does the activity in the 
CRM business - Oracle’s move 
to buy Siebel and sell its On- 
Demand offering, and the con- 
tinued growth of companies 
like Salesforce.com - affect 
Microsoft's hosted CRM 
plans? It’s not really affecting us. 
For hosting, we're bringing in sub- 
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“We'll be using the new ver- 
sion as soon as possible. I’m 
already recommending it to all 
the companies we work with,” 
McMahon said via e-mail. 

Darryl Nitke, CIO at Cosa 
Instrument Corp., also plans 
to move to 3.0 as soon as pos- 
sible to take advantage of its 
integration with Outlook. His 
Yaphank, N-Y.-based company, 
which distributes sensors, me- 
ters and industrial controls, 
runs CRM 1.2. 

Nitke said he isn’t interested 
in the subscription licensing 
changes from Microsoft be- 
cause “the hosted model 
wasn’t that great for us.” Cosa 
moved from a hosted Sales- 
force.com Inc. CRM system to 
the Microsoft software be- 
cause the hosted system 
lacked integration with Cosa’s 
accounting and e-mail applica- 
tions and had limited report- 
ing and customization capabil- 
ities, Nitke said. 

Liz Herbert, an analyst at 
Forrester Research Inc., said 
CRM 3.0 includes significant 
enhancements, including new 
or improved marketing and 
customer service capabilities 
and the ability to create role- 
based user interfaces. @ 58000 


scription-based pricing through 
a partner network. Previously, 
somebody had to buy the license 
- either the partner or customer. 


What type of company is 
Microsoft targeting with CRM 
3.0? We are selling from the 
smallest to the largest, bar none. 
For small businesses, we're re- 
leasing a small-business edition 
prepackaged for the Small Busi- 
ness Server. Our professional 
edition can fit with small busi- 
nesses that have more complexi- 
ty, as well as midsize and enter- 
prise-size companies. 


How does CRM 3.0 work with 
Outlook? We're going way be- 
yond Outlook integration. We're 
offering a native Outlook experi- 
ence, and many people will have 
no idea where Outlook stops and 
CRM starts. Expect us to integrate 
closely all the [business] applica- 
tions over time. 
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Telefénica to Buy Mobile 
Networks Operator 02 


MADRID 
ELEFONICA SA last week said it 
Tes: agreed to pay £17.7 billion 
($31.4 billion) for O2 PLC, which 
owns mobile network operators in the 
U.K., Germany and Ireland as well as 
on the Isle of Man. 

The deal ends speculation about a 
possible sale of Slough, England-based 
O2, which has been courted by several 
mobile services providers, including 
Koninklijke KPN NV in the Hague and 
Deutsche Telekom AG in Bonn. Both 
of those companies declined to com- 
ment on whether they will make coun- 
teroffers for O02, which was spun out of 
BT Group PLC in 2001. 

In a conference call, 
Telefénica Chairman 
César Alierta said that if 
the purchase of 02 goes 
through, the Madrid- 
based telecommunica- 
tions company has no 
plans to make additional 
major acquisitions in 
Europe. 

Telefonica said that it 
expects to complete the 
acquisition in January 





GLOBAL FACT 


Number of home and 
business subscribers to 
WOR cay ere) 
the European Union's 
member countries. 


NEWS 


An International 
IT News Digest 


and that O2 will retain its existing 
brand name and continue to be based 
in the U.K. 

mw JOHN BLAU, IDG NEWS SERVICE 


Guelconen Disputes 
nfair Licensing Claims 


BRUSSELS 
UALCOMM INC., a San Diego- 
based developer of chips and 
software for mobile communica- 

tions, is challenging charges of unfair 

patent licensing practices that were 

filed in Europe late last month by a 

group of six mobile vendors. 

In a statement issued Oct. 28, Qual- 
comm called the allegations “factually 
inaccurate and legally meritless” and 
vowed to vigorously defend itself. The 
company also contended 
that the complainants ap- 
pear to be seeking help 
from European officials in 
renegotiating the license 
fees for its patents. 

Nokia Corp., LM Erics- 
son Telephone Co., NEC 
Corp. and Texas Instru- 
ments Inc. are among the 
aoe vendors that said they had 

‘i filed complaints with the 
European Commission 


charging Qualcomm with anticompeti- 
| tive behavior. 

The complaints allege that Qual- 
comm has failed to adhere to agree- 
ments the company made when it con- 
tributed patents to the Wideband Code 
Division Multiple Access standard for 
| 3G mobile networks. 

m DAN NYSTEDT, IDG NEWS SERVICE 


Chinese Bank Caps 
Online Transactions 


BEIJING 

HE PEOPLE'S BANK OF CHINA, 
Terie sets that country’s mone- 

tary policy and regulates parts of 
its banking industry, has issued a set of 
guidelines capping the amount that in- 
dividuals can spend online at 1,000 
renminbi ($123.53) per transaction. 

The document, called “Guidelines 
for Electronic Payment (No. 1),” also 
limits the total amount of electronic 
payments that Chinese residents can 
make via the Internet and mobile 
phones on a daily basis to 5,000 ren- 
minbi ($618.62). 

However, transactions that require 
the use of digital signatures and certifi- 
cates to authenticate the identities of 
buyers are exempt from the limits. The 
central bank said the new rules are de- 
signed to reduce the possibility of on- 
line fraud. @ 57952 
m SUMNER LEMON, IDG NEWS SERVICE 
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Briefly Noted 


Vodafone Group PLC in Newbury, 
England, has agreed to buy a 10% 
stake in Bharti Tele-Ventures Ltd. in 
New Delhi for 66.56 billion rupees 
($1.48 billion). Vodafone said that 
Bharti has 14.1 million mobile cus- 
tomers and that Its fixed-line user 
base grew by 38% from April to 


September. 

w NANCY GOHRING, IDG NEWS SERVICE 
Lenovo Group Ltd., citing growth in 
Asian markets, said its second- 
quarter profits totaled HK$354 mil- 
lion ($43.8 million), topping a con- 
sensus forecast of HK$300 million 
($37.1 million) issued by Thomson 
One Analytics. Second-quarter 
revenue totaled HK$28.5 billion 
($3.5 billion). The PC maker said 
that 35.8% of its sales were in 
Hong Kong, Taiwan and China. 

mw SUMNER LEMON, IDG NEWS SERVICE 


The Tokyo Stock Exchange was 
forced to halt trading last Tuesday 
as a result of a system glitch. The 
problem was discovered before the 
market's 9 a.m. opening, which 
was delayed by more than four 
hours. Reports blamed the problem 
on a software error related to an 


October trading system upgrade. 
@ MARTYN WILLIAMS, IDG NEWS SERVICE 


Sun Taps Into StorageTek’s 
Portfolio for 1TB Tape Drive 


BY LUCAS MEARIAN 
Sun Microsystems Inc. last 
week brought out the first 
fruit of its recent acquisition 
of Storage Technology Corp. 
— a high-end, 3.5-in. tape 
drive that can hold up to ITB 
of compressed data. 

The new T10000 tape drive 
has a throughput rate of 
120MB/sec. — four times that 
of its predecessor, the 9940B 
model — and can encrypt data 
at the drive level. It has Fibre 
Channel and Ficon dual-port 
connectivity, Sun said. 

Charles Curran, a storage 
consultant at the European 
Organization for Nuclear 
Research, known as CERN, 
said he plans to test the 
T10000 tape drives next year 


alongside IBM’s competitive 
TS1120 1TB product, which 


| started shipping late last 


month. His organization, which 
runs a particle physics research 
center in Geneva, is looking to 
restock its storage farm. 
Curran expects that the re- 
search center will have to buy 
at least 200 tape drives to back 
up a mind-blowing 15 peta- 
bytes (15,000TB) of data annu- 
ally related to particle acceler- 
ator experiments. “The bigger 
the cartridge, the better,” said 
Curran, whose operation uses 
a StorageTek SL8500 modular 
tape library system. Curran 
said Sun has a slight through- 
put advantage over IBM of 
120MB/Sec. vs. 1OOMB/sec. 





He said the T10000’s ability 





to encrypt data isn’t important 


| at his site, since the lab’s data 


will be a series of seemingly 
random numbers collected 
from experiments in which 
atoms are accelerated to ve- 
locities approaching the speed 
of light and then smashed 
against other atoms. 

The accelerator experi- 
ments are expected to go live 
in 2007 once the new storage 
arrays are up and running. 


Key Issues 
CERN ’s StorageTek library 
currently houses 54 of the 
older 9940B tape drives with 
200GB native capacity each. 
The new T10000 technology 
would increase throughput 
four times and increase capac- 
ity two and a half times. 
While added capacity and 
throughput would help the 
research center lower the 
overall storage footprint in a 





30-year-old data center that 
has little room to grow, it 
doesn’t necessarily address 
CERN’s biggest problem: data 
restore time. 

“We have to try and read 


NEW PRODUCT 


Sun T10000 
Tape Drive 


= Offers up to 500GB 
uncompressed capacity 


= Supports Fibre Channel and 
Ficon dual-port connectivity 


= Has 120MB/sec. throughput 


= Supports native data 
encryption 





this data all back to try and 
analyze this in later years,” 
Curran said. “We have to in- 
troduce a policy into our soft- 
ware whereby we just don’t 
mount the tape until there are 
many requests for files from it. 
This is a serious change for 
our users. They'll have to dis- 
cipline themselves.” 

Scientists at CERN intend 
to read back all 15 petabytes 
of data up to twice a year in 
order to perform number- 
crunching analysis. Because 
of that, Curran is hoping 
to achieve high read through- 
put rates — up to 4GB/Ssec., 
which the new drives would 
be able to achieve working 
together. 

The T10000, which has a 
500GB capacity, is expected to 
be available this month start- 
ing at $37,000 for the Fibre 
Channel model and $44,000 
for the Ficon model. @ 58002 





FOR PC REFRESH 


Delaying a PC upgrade may actually cost you 

more in the long run. Often older PCs have lower 
security capabilities and higher maintenance costs. 
If a PC refresh is on your radar, talk to Insight. 

We offer great values on the leading desktop 

and notebook PCs. Plus, we offer a broad range 

of services and resources — such as Custom 
Configuration, Advanced Integration and 

Asset Disposal — to simplify deployment, lower 


costs and manage IT assets more efficiently. 


eo 


CASE STUDY: 
Simplifying IT Deployment 


Insight’s Custom Configuration services made it easier for a growing retailer 
to deploy systems in its new stores. Insight’s ISO 9001:2000-certified 
Custom Configuration Lab provided an all-in-one IT solution. 

Packaging custom-configured PCs, peripherals, color-coded cables 

and set-up instructions in one box, Insight made it easy for non-technical 
users to get new systems up and running without having IT experts onsite. 


ThinkPad® R52 
e 
ThinkPad 


Starting at $1,299.95 ssw 
ThinkPad® is a product of Lenovo 


@ nsight 


www.insight.com/CW ¥ 800.998.8052 iT For The Way You Work” 


ght and the Insight logo are registered trademarks of insight Direct USA, In 
All other trademarks, registered trademarks, photos, logos and 
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Novell 


offs, I'm not seeing any major 
changes coming [in Novell’s 
software offerings]. They’ve 
still got the best products out 
there,” said Brad Staupp, a se- 
nior support analyst at Johnson 
County Community College in 
Overland Park, Kan. Staupp 
said he has beta-tested Novell 
products for years with a core 
group of developers who he 
hopes will remain at the com- 
pany after the cutbacks. 
Novell’s continued focus on 
Linux came as a relief to some 
customers, including Steve 
Hartman, director of central 
directory services for the state 





| of Nebraska. The state uses 


22 clustered servers running 


| SUSE Linux for identity man- 
| agement purposes, and Hart- 


man said that officials in Ne- 
braska are “very pleased” with 
the software’s stability and 


| performance. But, he added, it 


would help Novell “if they got 
a little more Linux market 
share.” 

Red Hat Linux had the lion’s | 


| share of Linux sales last year, 


controlling nearly two-thirds 
of the worldwide market, ac- 
cording to Credit Suisse First 
Boston. SUSE Linux, in com- 
parison, had a market share of 
about 20%, the New York- 
based firm said. 

Novell CEO Jack Messman 


| had said as far back as August 


_NEWS 


| that cost reductions were in 


the works, after the company 
reported year-over-year de- 
clines in both revenue and 
profits for its third quarter. 
he layoffs, which are due to 


| be completed by the end of 


January, will reduce Novell’s 
5,800-person workforce by 
more than 10%. The move is 
expected to reduce annual ex- 
penses by over $110 million. 

The cuts are part of a wider 
restructuring designed to fo- 
cus Novell’s product develop- 
ment and consulting resources 
on areas such as Linux and 
open-source technology, as 
well as identity and resource 
management software. 

Also last week, Novell 
named Ron Hovsepian presi- 





Continued from page 1 


Newton, Mass., said a survey 
of 71 retailers conducted by 
the firm last summer showed 
that companies are increasing- 
ly associating demographic in- 
formation and transaction-lev- 
el data with customer profiles. 

Kilcourse said that while 
many retailers have assigned 
responsibility for ensuring the 
security and integrity of that 
data, the information often 
isn’t encrypted, and queries 
aren’t well controlled. Similar- 
ly, companies aren’t always 
capturing forensic data about 
the creation of customer infor- 
mation and its retrieval by end 
users, added Kilcourse, whose 
firm organized last week’s Re- 
tail Data Security Forum. 


Demand for ROI 


Within information security 
organizations, there’s a broad 
understanding of what needs 
to be done to fix such issues, 
said the IT security director at | 
a major franchise chain based 
in the Midwest. 

“The problem is the execu- 
tive sponsorship,” said the se- 
curity director, who requested 
anonymity. Although the se- 
ries of high-profile data com- 
promises that have come to 
light this year have raised 
overall awareness of the stakes 





involved, there still is an un- 


| Retail Data 


OF 7 retallers surveyed by Retail 
‘Systems Alert Group last summer: 


ABOUT 60% said they are 


willingness to invest in securi- 
ty projects “without a clear, 
demonstrable ROI,” he said. 

Even so, retailers overall 
have done a relatively decent 
job of protecting consumer 
data, said Bob Belair, a partner 
at Washington-based law firm | 
Oldaker, Biden & Belair LLP. 
Going forward, the key is for 
companies to be able to prove 
that they have invested an ap- 
propriate amount of time and 
resources in securing their 
data, he said. 

That means having a formal 
information security plan 
spelling out protections that 
are commensurate with the 
sensitivity of the data at risk, 
according to Belair. He ad- 
vised that such a plan also has 





to be dynamic so companies 
can respond to changing secu- 


rity threats. In addition, it 
should include processes for 
periodic security reviews and 
audits, and for training work- 
ers who handle consumer 
data, he said. 

“If you do all these things 
and a hacker still breaks in, 
chances are you aren’t liable, 
because you've acted in a rea- 
sonable manner that met the 
relevant metrics,” Belair said. 

The director of information 
security at a California-based 
specialty retailer with about 
400 stores said that distin- 
guishing between sensitive in- 
formation that’s covered by 
regulatory requirements and 
confidential data, such as infor- 
mation about intellectual prop- 
erty, is critical to the process of 
identifying the key data assets 
that need to be protected. 

The security director, who 
asked not to be identified, said 
his company is working to en- 
crypt all of the regulated data 
on its networks via a system 
that’s based on public-key in- 
frastructure technology. 

Michele DeMaree, president 
of DeMaree Consulting Inc. in 
Colorado Springs, said it’s also 
important to form cross-func- 
tional teams, develop a proc- 
ess for assessing risks by mea- 
suring the frequency of policy 
violations against customer 
data and other information, 
and educate business man- 
agers about the risks to their 
data. @ 58004 





dent and chief operating offi- 
cer and gave him direct re- 


| sponsibility for product devel- 
opment, marketing, sales and 


services. Hovsepian, 44, is a 
former IBM executive who 
joined Novell in June 2003. He 
had been head of global sales 
and services since last May. 
The No. 2 slot that he is filling 
at Novell had been vacant 
since former Vice Chairman 
Chris Stone left the company 
last November. 

“Novell did need to do 
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something at the leadership 
level,” said Gartner Inc. ana- 
lyst John Enck. “There’s been 
quite an absence since Chris 
Stone left.” 

“Hovsepian has overseen re- 
sults in the North American 
sales force, and with Messman 
getting older, it will be good for 
Novell to have somebody as 
good as Hovsepian in place,” 
said James Taylor, president of 
The East Cobb Group Inc., a 
Marietta, Ga.-based integrator 
of Novell products. @ 58027 


Open-source Use Is Slowing, Exec Says 


ALTHOUGH NOVELL views Lin- 
ux as a key growth business, 
Ron Hovsepian, the company’s 
new president and chief operat- 
ing officer, last week acknowl- 
edged that the adoption of open- 
source technology in data cen- 
ters is slowing rather than accel- 
erating. 

“There's a wait-and-see atti- 
tude from customers,” Hovsepi- 
an said during a speech at the 
Open Source Business Confer- 
ence in Newton, Mass., agreeing 
with similar comments 
from industry analysts. 

Hovsepian, who 
spoke before Novell 
announced its layoff 
and restructuring plans, 
said that vendors are 
holding back open- 
source software and 
need to package it bet- 
ter and provide users 
with migration tools. 

“Right now, [a com- 
pany's IT department] 
has to be the systems integrator 
and is responsible for articulat- 
ing the value back to the busi- 
ness,” he said. “The customer is 
having to do too much.” 

Hovsepian noted that Novell 
has increased the number of 
packaged applications supported 
by SUSE Linux to more than 
1,000, up from 42 when it bought 
the operating system in January 
2004. But he also stressed the 
importance of “driving open- 
source where it is needed and not 
trying to force-fit it” into user sites. 

Rowdy Van Cleave, vice pres- 
ident of network operations at a 
financial services firm in the San 


HOVSEPIAN 
says Novell 
has observed a 
wait-and-see 
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Francisco area, said his compa- 
ny is testing SUSE Linux to see 
if it can handle myriad financial 
applications. With so many cus- 
tom applications in large com- 
panies like his, help from ven- 
dors is needed to make a shift 
to Linux feasible, added Van 
Cleave, who asked that his em- 
ployer not be identified. 

In an interview after his 
speech, Hovsepian said Novell 
doesn't plan to sell off either its 
GroupWise collaboration software 
or ZENworks resource 
management products. 

But Gartner analyst 
John Enck said the 
move to focus internal 
resources on a smaller 
number of technologies 
raises questions about 
how much the company 
will invest in products 
such as GroupWise and 
NetWare. 

Enck said Novell offi- 
cials told him last week 
that they remain committed to 
NetWare, which has long been 
the company’s flagship product. 
But he advised NetWare kernel 
users to be prepared to move 
within five years to Open Enter- 
prise Server, which also runs the 
stack of NetWare computing ser- 
vices on Linux. 

According to Enck, Novell of- 
ficials also told him that there 
will be at least two more ver- 
sions of GroupWise and that 
technical support will continue 
on the collaboration technology 
for 10 more years. 

- Matt Hamblen, with China 
Martens of the IDG News Service 





SDLT 600 Results : 
Taste : [ Speed : lA Manageability : [A 
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In a blind taste test, the SDLT 600 was found to be less than appetizing. Test subjects’ 
comments included, “if there is a hell, this is the food.” Scientists have agreed to conduct 
the next round with condiments. As for data backup abilities, it passed with ease. The 
SDLT 600 has more capacity and more speed than LTO-2 and AIT-3. It also includes 
DLTSage™ diagnostic management software and DLT/ce™ archival WORM functionality. 
How do we know? It's been tested. For more info and to see the whitepaper, visit DLTtape.com. 
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Bumrungrad Hospital, Southeast 
Asia's largest healthcare facility, created a kid-friendly pediatric clinic out of a 10,000-square-foot 
medical records unit. How? An ultra-scalable, 4-way Intel Xeon processor-based system 
improved data reliability and made records paperless. Read more about Bumrungrad Hospital's 
experience with Intel built in at intel.com/builtin. 
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OPINION 


DON TENNANT 


Opium Wars 


ALK ABOUT some vivid flashbacks. 
As I was reading this week’s “China 
Syndrome” cover story on the global 
problem of counterfeit hardware and 
software products, I was transported 
back a decade to when I was working for the Hong 
Kong edition of Computerworld. On a July after- 
noon in 1995, I did something that, in hindsight, 


was pretty stupid. 

I decided to do a photo- 
graphic exposé on the 
Golden Arcade, the notori- 
ous basement-level maze 
of shops and stalls in the 
Shamshuipo district of 
Hong Kong that was widely 
known as the heart of the 
region’s counterfeit soft- 
ware industry. For around 
$5 to $10, you could buy 
just about any piece of soft- 
ware imaginable, from 
operating systems to rela- 
tional databases to video 
games. And more often than not, the 
pirated version of any given U.S. soft- 
ware product was available in the ar- 
cade before the legitimate version was 
officially launched in Hong Kong. 

Taking photographs in the Golden 
Arcade was risky. There were signs 
posted everywhere showing a camera 
with a big X over it, with written warn- 
ings that photography was strictly pro- 
hibited. It was no secret that Hong 
Kong’s triads — organized criminal el- 
ements — were heavily involved in the 
piracy trade, so the signs carried some 
serious clout. 

It was hardly surprising, then, that I 
raised a ruckus when, once inside, I be- 
gan snapping photographs. People were 
shouting, and a Westerner who was 
paying for his illegal wares scowled at 
me. “That'll get you into real trouble,” 
he said. “Very trouble,” a shopkeeper 
echoed in broken, but effective, English. 
I ignored them, took a few more pho- 
tographs and left without incident. 

My aim was to show readers around 
the world, in a way that words really 
couldn’t, how brazen and institutional- 
ized software piracy was in Hong 
Kong. But words are the only tool I 





have to convey why that 
was the case. 

While there is no ex- 
cuse for criminal activity, 
there are reasons for it, 
and there are contributing 
factors. One of the factors 
you don’t hear much about 
is that the big-name U.S. 
software makers helped to 
foster a predisposition to 
software piracy. 

For years, those vendors 
relied on local distribution 
partners to sell their prod- 

ucts in Hong Kong, China and else- 
where in Asia, rather than investing in 
those markets with a direct presence. 
Since the distributors typically were 
grossly ill-equipped to provide decent 
technical support, users tended to feel 
like second-class customers. Paying 


As You CAN SEE, 
We HAVe A 
PROBLEM HERE. 





full price for legitimate software was 
considered unfair when they weren’t 
getting the support benefits that their 
counterparts in the West enjoyed. 

Exacerbating the resentment were 
the heavy-handed tactics of the 
Washington-based Business Software 
Alliance. The fact that the BSA con- 
ducted raids and rewarded informants 
to nail companies that were using ille- 
gal software didn’t sit well with many 
users. After all, the BSA represented 
companies that were seen as dragging 
their feet on investing in local support 
operations. 

But most damaging of all was the 
fact that U.S. software vendors were 
considered two-faced. While the BSA 
was conducting its raids, senior execu- 
tives from some of the top vendors 
would openly declare, “If the Chinese 
are going to pirate software, we want it 
to be ours.” The point was that they 
wanted their software to be so en- 


| trenched in the market that being a 
| de facto standard would eventually 


yield a huge payoff. 

What they didn’t realize was that 
trying to get the Chinese hooked on 
their software that way was a little, 
shall we say, insensitive. Remember 
the Opium Wars? They do. @ 57967 
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BRUCE A. STEWART 


DMIT IT: The IT life 
isn’t usually a lot of 


fun anymore. 

We spend our days slowing down 
the pace of change. We no longer up- 
grade equipment just because it’s three 
years old. We avoid the next release. 
We worry about money all the time. 

Meanwhile, our colleagues present 
us with the usual long lists of requests 
— but not a single exciting project. In- 
novation appears dead. Caution rules. 

If you’re looking for something as 
big and challenging as when you in- 
stalled your ERP package, the timing is 
wrong. But if you’re looking for the op- 
portunity to make a difference, the 
timing is right. 

Here are two ideas 
to make life more in- 
teresting. 

Infrastructure re- 
platforming is be- 
coming more inter- 
esting. One of my 
clients is seriously 
looking at buying an- 
other mainframe to 
run Linux partitions 
to replace Unix 
servers that run SAP. 

Why? Business con- 

tinuity. It costs this 

client four times as 

much to have its dis- 

aster recovery ven- 

dor provide servers 

as it would to provide mainframe ca- 
pacity, and installing another main- 
frame can prevent a multimillion- 
dollar data center upgrade as well. 

This counterintuitive move (wasn’t 
the mainframe supposed to have died 
by now?) also allows this client to 
break the back of its prioritization 
process, which was based on applica- 
tion projects automatically outweigh- 
ing infrastructure moves. Its justifica- 
tion was simple: “Not only can we save 
money in the budget and increase our 
flexibility by doing this, but the return 
on investment is guaranteed as well. 
Sure, we may offer only a single-digit 
return — but there’s no doubt it will be 
delivered.” This company now assess- 
es the risk associated with getting a re- 
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turn — and the infrastructure area is 
getting a lot more money as a result. 
Increasing utilization of existing 
applications is also a growing trend. 
Vivaldi Odyssey and Advisory Service 
has discovered that real usage is often 
a fraction of what the business case in- 
tended, making the real ROI far less 
than expected. Six months after instal- 
lation, it’s not uncommon to find that 
only 15% of the users make use of 40% 
or more of the functions installed, with 
20% still using less than 5% of the new 
capabilities. Low-use situations can see 
60% or more of the users not use the 
new facility at all, with another 20% 
using less than 5% of its capabilities. 
So where’s the problem? Was the 
system overdesigned? Misdesigned? 
Is it an issue of management disci- 
pline in seeing to it that the system 
gets used? Would training help? Find- 
ing and solving the real problem will 
unlock the latent value in what has 
been delivered. When the solution de- 
livered just doesn’t solve users’ prob- 
lems, they won't use it. I recall one 
case where a major system was intro- 
duced that just didn’t fit the way work 
was done. Even though the justifica- 
tion was staff reduction — and the re- 
ductions had been made — the users 
found a way to avoid the new system. 
What ties these two ideas together 
is adopting a more businesslike ap- 
proach. Thinking and speaking of fi- 
nancial risks and returns or acting as 
business consultants opens business 
leaders’ eyes to the knowledge and 
skills IT professionals have. Convince 
them that you have more to offer than 
what you do inside IT, and the interest- 
ing work will begin to flow. @ 57905 


DAVID MOSCHELLA 


TI; Dot-coms 
And ‘Getting’ 
Business 


OU MAY NOT have no- 

ticed recent stories ex- 

plaining why German 
book publishers are saying no 
to Google’s — and previously Ama- 
zon.com’s — requests to put German- 
language books online. But while it’s 
easy to dismiss this as just another 
publishing industry story, there are 
larger lessons that continue to get 
too little emphasis. 


Ever since the dot-com 
boom, there has been direct 
competition between pure- 
play Internet firms and es- 
tablished, pre-Internet com- 
panies. Which group has the 
advantage? Should the two 
sides try to coexist, or 
someday merge? Which 
would ultimately prevail? 
Ten years into the debate, 
we have an initial answer — 
the newcomers are winning. 

Consider the sectors 
where the dot-coms have 
triumphed, at least in con- — 
sumer-oriented businesses. The music 
industry sued and dabbled only to 
have iTunes suddenly sweep past the 
old-line labels. Citibank experimented 
with Internet payment systems but 
was consistently outmaneuvered by 


PayPal. To compete with Expedia et al., 


US. airlines invested heavily in their 
own travel business, Orbitz, but even- 
tually sold it off to Cendant. U.S. book 
publishers never really tried to com- 
pete with Amazon, which also easily 
routed Barnes & Noble. No established 
health care provider has really chal- 
lenged WebMD. Google and Yahoo 
have smashed the best of what Disney, 
Time Warner and others had to offer. 
Of course, there are some important 
examples on the other side. The gro- 


meats 


a more efficient and secure power 


IT Could Transform the Power Grid 





cery industry has moved 
aggressively into online 
delivery, and now Stop & 


Shop owns Peapod. Clearly, 


the major brokerage firms 
haven't crumbled in the 
face of online brokerages, 
and the Internet has made 
few major inroads into the 
insurance industry. Major 
League Baseball broadcasts 
its games directly over the 
Web. But these successes 
pale compared with the 
longer list of losses. 

Many of these defeats 
are likely to have long-term conse- 
quences. It’s becoming clear that if es- 
tablished players can’t extend their 
success to the Web, their pre-Web 
businesses will eventually suffer. Ap- 
ple’s iTunes is already getting into the 
talent identification and promotion 
business, threatening the very life- 


| blood of the traditional music industry. 


The Internet is destined to become a 
vast infrastructure for purchases, mo- 
bile payments, gambling transfers and 
other transactions that the world’s 
banks ignore at their peril. Similar 
risks exist in many of the industries 
cited above. 

What’s the situation in your busi- 
ness? IT professionals that really care 
about the companies they work for 


system. 





should be asking themselves questions 
such as the following: 

@ Where is new IT-based value being 
created in our industry? 

@ What is our company’s share of 
this new value? 

@ Is this share rising or falling? 

@ If it’s falling, what can we do 
about it? 

These are the types of questions that 
business people routinely ask them- 
selves but that corporate IT people, in 
my experience, only rarely ask. The 
questions aren’t particularly hard; ball- 
park estimates will generally suffice. 

We’re always hearing about how IT 
must become more businesslike, but 
usually this refers to working better 
within one’s own company. Truly 
knowing your business, however, 
means understanding the use of IT not 


| just inside your organization, or even 


by your major competitors, but across 
your company’s entire ecosystem. 
The German book industry may or 


| may not have the resolve and solidarity 


needed to fend off mighty Google. But 
at least it’s asking the right questions 
and getting itself into the game. Are 


| you? @ 57877 
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More columnists and links to archives of previous 
columns are on our Web site 
www.computerworld.com/columns 


unchanging, comfortable roles. An 
enterprise has a mission to deliver 





ENJOYED Thomas Hoffman's ar- 
ticle on modernizing the power 
grid [“Healing Power: Electric Grid, 
Repair Thyself,” QuickLink 55643). 
One collection of activities not men- 
tioned falls under the banner Grid- 

Wise. It's a vision for the future 
electric system built on the premise 
that IT will profoundly transform 
planning and operation of the pow- 
er grid, just as it has changed busi- 
ness, education and entertainment 
The Department of Energy has a 
GridWise program within its Office 
of Electricity Delivery and Energy 


Reliability that focuses on advanced | 


communications and control for 
modernizing the electric power sys- 
tem. The DOE also has a memo of 
understanding with an industry or- 
ganization, the GridWise Alliance, 
that’s advancing a vision for a smart 
energy system and developing a 
path for its implementation. Also, 
part of the DOE GridWise program 
supports a select group of technol- 


| ogy-oriented professionals from the 
broad stakeholder community. 


| cil, created following the major 
2003 Northeast blackout and in re- 
sponse to the Department of Ener- 
gy’s call for a next-generation elec- 
tric system, seeks to establish 
broad industry consensus in sup- 
| port of the technical principles that 
enable the interoperability neces- 
sary to transform electric power op- 
erations into a system that inte- 
grates markets and technology to 
| enhance our socioeconomic well- 
being and security. 

To achieve this vision, the 13 
members of the council are devel- 


| oping and promoting policies and 


practices for intelligent interactions 
and interoperability across the elec- 
tric system. With these “rules of 

the road” clearly defined, it will be 
possible to explore new concepts 


| that allow electric devices to inter- 





act and adapt as full participants in 


The GridWise Architecture Coun- 





Steve Widergren 

Chief engineer, Pacific North- 
west National Laboratory, 
operated for the Department of 
Energy by Battelle, Richland, 
Wash., steve.widergren@pnl.gov 


Joining the Club 


N READING THE COLUMN “Re- 

evaluating Accountants” [Quick- 
Link 56208), | was struck by the 
point that accountants feel threat- 
ened by new systems that change 
their role. Welcome to the club, bean 
counters! ERP systems and other ini- 
tiatives like lean manufacturing have 
been changing roles for people in 
manufacturing and other disciplines 
for years. IT has been changed, too. 
When PCs with spreadsheets ar- 
rived, we had concerns that users 
were creating and managing their 
own information, away from the 
mainframe world. But no enterprise 
exists to provide people with jobs in 





goods and/or services as well as or 
better than its competitors. A supe- 
rior organization pursues process 
change for improved productivity 
and customer satisfaction. But it 
also recognizes the value its em- 
ployees have in understanding the 
business and finds new roles for the 
best and brightest. 

Maynard Wiff 

Hudson N.H. 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity. 
They should be addressed to 
Jamie Eckle, letters editor, Com- 
puterworld, PO Box 9171, 1 Speen 
Street, Framingham, Mass. 01701. 
Fax: (508) 879-4843. E-mail: 
letters@computerworld.com. 
Include an address and phone 
number for immediate verification. 


For more letters on these and 
other topics, go to 
www.computerworld.com/letters 
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Moving Pictures 
Mobile video is a reality 
for consumers, especially 
in Asia, and it shows 
promise as a business 
application — but not for 
the near future. Page 28 


FUTURE WATCH 
Can You Understand Me Now? 


Voice applications like interactive 
voice response and other speech- 
recognition technologies are finally 
ready to live up to their promise. 


Page 30 


| SECURITY MANAGER'S JOURNAL 

| How to Get a Job 

| In the Infosec Field 

CJ. Kelly’s readers wrote to her and 
| wondered where the IT security jobs 
| are, so she did a little research and 


| tells what she found. Page 34 
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DATA QUALITY ISN'T AG 


LAMOROUS TOPIC, BUT 


COMPANIES IGNORE IT - rent a INTERNAL 


When Nancy Rybeck was hired by Emer- 
son Process Management six years ago, 
she was charged with salvaging a data 
warehouse that had been built to help 
the company better analyze customer 
activity. But after a thorough review, 
she opted to scrap it and start over. The 
warehouse, it seemed, was 
loaded with redundant and 
inaccurate data. 

“The biggest reason [the ear- | 
lier effort] had failed was data | 
quality,” says Rybeck, data 
warehouse architect at Austin- 
based Emerson Process Man- 
agement, a global supplier of 

measurement, analytical and 
monitoring instrumentation and 
services. One major contribu- | 
tor to the failure was an as- 
sumption made by the group 
that launched the initial Mi- 
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crosoft Access-based effort: that sales en- 
tities all over the world would enter cus- 
tomer names and addresses in the same 
manner, regardless of whether they oper- 
ated in the Asia-Pacific region, Europe or 
other areas in which Emerson does busi- 
ness. Cultural differences, combined with 
complications caused by Emerson’s con- 
tinuing growth through acquisition, re- 
sulted in numerous ways of entering 
quote, billing, shipping and other key data. 
Emerson’s problems with inaccurate 
data are typical across all industries. 
Through 2007, at least 25% of critical data 
within Fortune 1,000 companies will con- 
tinue to be inaccurate, according to Gart- 
ner Inc. And only 34% of executives re- 
sponding to a 2004 Pricewaterhouse- 
Coopers survey said they’re very confi- 
dent in the quality of their corporate data. 
Although many businesses tend to 
think that data quality primarily affects 
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customer-facing initiatives, the impact 
can be more profound on internal opera- 
tions. “CRM initiatives fail, and compa- 
nies get into trouble with the security 
and privacy of customer data,” says 
Gartner analyst Ted Friedman. “But the 
big money being lost [because of poor 
data quality] is in internal operations.” 

Inaccurate financial reporting, uncol- 
lected receivables, overpayments, poor 
product specifications, excess inventory 
— the problems caused by inaccurate 
data are endless, and they all affect the 
bottom line. 

Meanwhile, mounting regulatory com- 
pliance requirements dictate increased 
data vigilance. “You can have all the con- 
trols in place, but if your data’s not accu- 
rate, your CFO will be signing off on inac- 
curate information,” says Robert Lerner, 
an analyst at Current Analysis Inc. 

Data quality initiatives have long lan- 
guished in the shadow of sexier projects. 
But thanks to failed CRM and ERP ef- 
forts, compliance violations, costly sup- 
ply chain inefficiencies and more, that’s 
starting to change. Investments in data 
quality suites are growing at a rate be- 
tween 12% and 15% annually, according 
to Gartner, and the market is starting to 
consolidate as it matures. 


Protect Your Source 


Tools that address data quality fall into 
a variety of categories, including data 
profiling software, which sifts data 
fields for duplication, missing informa- 
tion and other errors; data cleansing 
and matching tools, which parse data 
into discrete elements, clean it, stan- 
dardize it in formats, and match and 
merge records; data enhancement tools, 
which enrich data by incorporating, for 
instance, third-party elements; and data 
monitoring tools, which ensure that 
data maintains a preset level of quality. 

Some IT groups still rely on extract, 
transform and load functions to ready 
data from various applications for stag- 
ing in warehouses, but experts say ETL’s 
effectiveness is only as good as the data 
being transformed. 

“ETL isn’t the same thing as data quali- 
ty; [the process] may have nothing to do 
with data cleanup,” says Chad Wright, ap- 
plications manager for business intelli- 
gence and CRM at Tewksbury, Mass.- 
based Avid Technology Inc. The provider 
of digital media creation products pur- 
chased tools from Firstlogic Inc. in 2001 
as part of an effort to clean and match 
data between its new SAP CRM system 
and its legacy Onyx CRM system. (In 
September, Pitney Bowes Inc. announced 
its intention to acquire Firstlogic.) 

Avid continues to use Firstlogic tools 
to validate customer master data from 
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| companies it acquires against its SAP 


masters to prevent duplication. It’s also 
performing some data quality measures 
in real time: The IT group has developed 
a Web service that takes advantage of 
Firstlogic’s IQ8 service-oriented archi- 


| tecture (SOA) to automatically capture 


shipping information and validate it 
against country-specific postal codes, ac- 


| cepting or correcting it at the point of 


contact. Avid is also running the vendor’s 
Global Data Quality Connector for SAP, 
which allows real-time checks in the SAP 
environment during order processing. 

“We saw benefit from doing real-time 
data quality functions, cleaning up the 
thousands of marketing leads that come 
into our systems every day,” says Wright. 

Emerson has adopted data quality 
tools from Landham, Md.-based Group 1 
Software Inc., a Pitney Bowes subsidiary, 
to help profile, cleanse and merge 
records for its data warehouse. Given 
Emerson’s global scope and acquisition 
strategy, cleaning data manually wasn’t 
an option, says Rybeck. 


Emerson’s data warehouse is fed by nu- | 
| as sales projections. “We wouldn’t have 


merous source systems from around the 
world. Contact information for quoting, 
billing and shipping is linked to associat- 
ed transactional records. Duplicate rec- 
ords are then eliminated, and the data is 
merged using Group 1 tools, custom cod- 
ing and manual review processes. Ulti- 
mately, says Rybeck, Emerson wants full 
use of its contact data to better anticipate 


BURDENSOME as 
compliance mandates 
may be, they've made 
the business case for 
data quality tools with- 
in some organizations. 
Matching capabilities 
are a component of what 
data quality tools offer, and they're particularly 
useful when businesses need to ensure that 
they're in compliance with, say, the Treasury 
Department's Gffice of Foreign Assets Con- 
trol's (OFAC) list of Specially Designated Na- 
tionals (SDN), a list of terrorists, drug traffick- 
ers and similar unsavories. Financial services 
and insurance firms must continually check to 
ensure that customers or potential customers 
aren't on the list. 

And these suspect lists “are a mess,” accord- 
ing to analyst Robert Lerner at Current Analysis. 
There's no schedule for their release because 
they're updated as needed, and they're primarily 
in ASCII format. 

American Education Services (AES), which 
manages more than $43 billion in assets 
through its servicing, guaranty and financial aid 
processing systems, is using Pittsburgh-based 
Innovative Systems Inc.'s i/Lytics Secure to 
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customer needs and improve its service 
and marketing. 

“The plan is to have this feedback loop 
be complete. In the past, we may have 
used the marketing information to get 
some business, but we’ve never followed 
through to see what the profitability was 
in a marketing campaign,” says Rybeck. 


Keeping It Clean 
Since adopting data quality tools from 
Billerica, Mass.-based Trillium Software, 
printer manufacturer Oki Printing Solu- 
tions has been able to improve its mar- 
keting campaigns. It has also significantly 
reduced fees and fines in its distribution 
chain associated with bad contact infor- 
mation, says senior systems analyst Mag- 
gie Dominguez. Mount Laurel, NJ.-based 
Oki started using Trillium in 1999 to 
clean data it was moving from legacy sys- 
tems to SAP and now uses it for handling 
consumer and end-user contact data. 
Dominguez and her team started 
building a data warehouse less than a 
year ago to improve the company’s 
analysis capabilities for functions such 


survived without the data quality tools,” 
she says. “We would have ended up with 
huge quantities of data that would have 
been very hard to mine.” 

Although businesses would like to ad- 
dress their data quality problems once 
and be done, maintaining accurate data is 
an intensive, ongoing effort. A master 


MUS 


check its various loan 
servicing and guaranty 
databases against the 
OFAC list. According to 
Diane Freundel, assis- 
tant vice president at 
the Harrisburg, Pa.- 
based agency, AES 
runs the program every time it runs an origina- 
tion database batch, which could be several 
times daily, as well as at preset times for other 
databases. 

When OFAC releases an update of the SDN 
list, AES receives a cleansed version from In- 
novative as an FTP file. If the system finds a 
suspicious person, execs receive an e-mail that 
directs them to a report. “Otherwise we'd have 
to manually look up every person that we're 
originating a loan for,” says Freundel. 

Though i/Lytics has default business rules for 
matching criteria, AES opted to set thresholds 
lower. That means it gets a higher rate of false 
positives, requiring more manual rechecks. The 
software also allows the company to put people 
who've passed previous checks on a “safe list” 
so they don’t have to be rechecked unless perti- 
nent personal data or the list changes. 

- Kym Gilhooly 
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customer file may be completely accurate 
on Friday evening but house numerous 
inaccuracies by Monday morning, with- 
out any interference. That’s because data 
decays by itself: People are born and die, 
and they change names and addresses; 
companies go out of business or get 
snapped up. Further, there are many 
points of entry to enterprise data sources, 
and data is continually repurposed. 

Key to maintaining data cleanliness is 
controlling who touches it, says Jeffrey 
Monica, manager for data quality at 
StorageTek, a subsidiary of Sun Micro- 
systems Inc. StorageTek has been using 
tools from DataFlux Corp., a SAS Insti- 
tute Inc. subsidiary, to cleanse data 
from more than 60 source systems 
worldwide for a customer data ware- 
house. “We want to give people the 
flexibility to use [the warehouse and as- 
sociated marts], but we'll have control 
over the quality of the data so we can 
say we have a single version of the 
truth,” Monica says. 

StorageTek uses Informatica Corp.’s 
ETL tool to pull data from specific 
fields for data warehouse loading. It 
uses DataFlux tools to identify the most 
accurate record and to cleanse and 
standardize data. Though Monica says 
StorageTek still has significant data 
duplication, the company has thus far 
reduced 1 million records in its ware- 
house to around 200,000. 

StorageTek began the warehouse ef- 
fort three years ago but didn’t buy data 
quality tools until a year ago, says Mon- 
ica. “The good news is we recognized 
we needed them, but the bad news is 
we didn’t do it on Day One,” he says. 

Others are recognizing the need as 
well, and deployments will be improved 
only by increased integration between 
data quality tools and enterprise appli- 
cations, support for Web services 
through SOA approaches, and process- 
es for continuous data quality monitor- 
ing, say experts. 

“If you’re processing large amounts 
of data, you need data quality tools so 
you can do standardization, validation, 
cleansing and duplicate-checking,” 
says Avid’s Wright. Then, he says, you 
can start attacking the problem at the 
source, ensuring that new data enter- 
ing the system is clean. @ 57769 





Gilhooly is a freelance writer in Fal- 
mouth, Maine. You can reach her at 
kymg@maine.rr.com. 


CONSOLIDATION TREND 


The number of data quality vendors is dropping as 
mergers and acquisitions dominate the market: 


QuickLink 57771 
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BM eServer xSeries 226 Express 
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ONSUMERS in the U.S. 

enjoy video clips and 

even receive live TV 

broadcasts on their wire- 

less phones and other 
handheld devices. Teenagers in Japan 
chat with their friends using wireless 
videoconferencing over their cell 
phones. With such innovations, some 
IT executives in the U.S. look forward 
to a time when they can transmit video 
content or even conduct videoconfer- 
encing over handheld devices for busi- 
ness purposes. 

“I think the most innovative and ag- 
gressive health centers are on the 
brink” of mobile video applications, 
says John Wade, CIO at Saint Luke’s 
Health System Inc. in Kansas City, Mo., 
noting that many hospitals are already 
expanding wireless LANs and getting 
more physicians to carry mobile tech- 
nology. “I'd be surprised if mobile 
video wasn’t leading-edge technology 
in 24 months.” 

The allure of a Dick Tracy two-way 
wristwatch with video capability is 
alive for some potential users, but the 
reality may still be years off, according 
to IT executives and analysts. 


ct 





CIOs envision a range of applica- 
tions, mainly in health care and service 
industries. For example, a mechanic 
working deep inside a ship or plane 
could be wearing a wireless heads-up 
display — a device like a visor that’s 
equipped with a video screen — that 
receives an audio or video tutorial on 
a part he is trying to install. The need- 
ed information would be right in front 
of the mechanic, rather than back at a 
desktop. Or, a service worker fixing 
a home washing machine could con- 
sult a Web site with numbers and pic- 
tures of parts, perhaps to watch an 
animation of how a part works or to 
check with his boss via a real-time 
videoconference. 

At Maytag Corp., videoconferencing 
over handhelds would be “tremen- 
dous” help in transmitting technical 


| drawings and other visual information 


to and improving communications 
among more than 800 field-service 
technicians; says CIO Ernie Park. 

And in health care, the process of 
consulting a medical expert in another 
city could be improved by the trans- 
mission of charts and other data over a 
wireless video link that also enhances 


La 
The technology for mobile 
video is in place, and it’s poised 
to take off in some industries — 
but wide adoption is a ways off. 
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Take a Look at This 


VIDEO MOBILE applications 
are already emerging in work- 
places such as FoxHollow 
Technologies Inc. in Redwood 
City, Calif. 

More than 250 sales repre- 
sentatives from the medical 
technology company have 
been using Palm Inc.'s Treo 
600 and 650 handheld smart 
phones for nearly two years to 
play animation clips showing 
their main product at work. 

The two-minute clip resides 
on a memory card inserted in 
the device, which is easy for 
sales reps to pull out quickly 
to show a doctor who is in a 
hurry and might not wait for a 
laptop to be booted to play the 
clip, says Norman Leong, help 
desk supervisor at FoxHollow. 
“It's much faster than pulling 
out a laptop - taking a few 
seconds for Treo versus two 
minutes for the laptop,” he 
estimates. 


called the SilverHawk Plaque 
Excision System that helps 
doctors remove arterial plaque 
mainly from the legs of pa- 
tients. It uses a tiny rotating 
blade to shave away plaque 
from inside the artery. 

The purpose of the two- 
minute animation and two 
other videos is to quickly show 
medical personnel how the 
device works, Leong says. 
Doctors could watch the 
videos on the FoxHollow Web 
site but might never get a 
chance. The videos can also 
be shown to patients about to 
undergo the procedure - and 
that process is simpler with a 
handheld than it is with a lap- 
top, he says. 

While the video is stored 
with a manual synchroniza- 
tion, the reps also use the 
Treos wirelessly with Good 
Technology serving as the 
e-mail provider. 


watch a procedure and have 
e-mailed their colleagues for 
advice when a minor compli- 
cation with the medical device 
arose. They have gotten quick 
responses, and the e-mail to 
the handheld has played an 
important role, Leong notes. 

Leong wouldn't say the 
Treos have been exactly mis- 
sion-critical for FoxHollow, but 
he did say, “If a Treo goes 
down in the field, we find out 
about it within minutes.” 

In the future, reps could 
even use a camera on the 
Treo to record a procedure 
and transmit it, he says. 

Despite the small size of 
the Treo, the 650 has “quite 
good video clarity” with reso- 
lution of 320 by 320 pixels. 
“You can see it and hear it,” he 
says. In other words, it has 
practical value for playing 
video, something that could 
be eventually used in a wire- 


FoxHollow makes a feder- 
ally approved medical device 


the communication by transmitting the | 


faces of participants, adds Wade. 
Although diagnosing a patient over 
a tiny video device might sound far- 
fetched today, it could eventually be an 
extension of what’s already happening 
between doctors and patients using 
larger videoconferencing monitors 
over wired networks at the University 
of Texas Medical Branch (UTMB). 
Mobile videoconferencing could be 
useful in some clinical areas, including 


mental health intervention, or for diag- | 


nosing conditions such as skin disor- 
ders, says Glenn Hammack, assistant 
vice president and executive director 
at UTMB in Galveston. 


Advances and Barriers 
Technology will advance in the next 
two to five years to greatly expand 
wireless bandwidth and improve video 
resolution on the screens of small de- 
vices, areas that hold back some effec- 
tive video communications today, says 
John Stehman, an analyst at Robert 
Frances Group Inc. in Westport, Conn. 
But some of the technologies neces- 
sary to support wireless video may lag 
for much longer. Take batteries, for 
example. Today, a long video clip run- 


Several times, sales reps 
have worn hospital scrubs to 





less network. 
~ Matt Hamblen 


ning on a cell phone can drain the 


phone’s battery, says Jeffrey McDowell, 
| To accommodate the awkwardness of 


a director of independent software 


| vendor alliances at Research In Motion | 


Ltd. (RIM) in Waterloo, Ontario. For 
the immediate future, RIM is concen- 


| trating on support for its traditional 


customers’ needs for reliable and se- 
cure data, not video, he adds. 
One RIM partner, Mirifex Systems 


LLC in Strongsville, Ohio, which builds | 


mobile business applications, is count- 
ing on customers continuing to ask 

for the basics in their applications, 
such as secure e-mail, says CEO Bill 


| Nemeth. 


Meanwhile, Chris McGugan, senior 
director for wireless product manage- 
ment at Symbol Technologies Inc., says 
“there are some markets where video 


| on mobile could work,” but he describes | 
| it as an application that won’t be com- 
| monplace until fairly far into the fu- 
ture. And Rick Osterloh, vice president | 
| interested in purchasing mobile video 
| services from a wireless provider. 

| That’s enough for the technology to 


of products at Good Technology Inc., a 


| RIM competitor, calls video on mobile 


devices an emerging technology. 

Most of the wireless carriers in the 
US. are aggressively marketing video 
clips and animations to consumer users, 


| but interest in mobile videoconferencing 





_ TECHNOLOGY 


seems limited to Asian countries so far. 
“I’m not really hearing much about | 

mobile video for business uses from 

service providers or vendors,” says 


| Stehman at Robert Frances Group. 


“Certainly verticals such as medical 


| and construction will see it, but it’s 
| predicated on when we get next-gener- 
| ation networks and enough ceil sites, 


and that’s not going to be until after 


| 2006.” Stehman says IT executives can 


make long-term plans to decide which 


| applications might be desirable once 


mobile video technology becomes 


| more feasible. 


The Comfort Factor 


Video mobile technology advance- 
ments won't play as big a role in the 
planning process as the comfort level 


| of users, warns Saint Luke’s Wade. “It 


will truly be up to those innovative 


| doctors and nurses who value access 
| to information more than complying 


with ‘the way we’ve always done it’ 


| mentality,” he adds. 


Allen Nogee, an analyst at In-Stat in 


| Scottsdale, Ariz., also believes the user 


acceptance of mobile video and video- 


| conference will be vital. Based on his 


observations of teenage users in Japan, 


| he says, videoconferencing over a cell 
| phone today is ergonomically difficult. 
| “If you hold the phone with a camera, 


you have to point it at yourself so you 


| frame yourseif, but you might only be 


guessing, and then it might be too far 
away to pick up your voice,” he says. 


videoconferencing, some phones have 
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reach 1.] million this year in the U.S., 
and it will grow to more than 30 mil- 


| lion in 2010, In-Stat forecasts. 


Carriers such as Sprint Nextel Corp. 
are making a big push to capture the 
teen market. Sprint Nextel, for exam- 
ple, offers a service called Varsity Mo- 
bile, which features first-run shows 


and viewer interactivity. Carriers and 


| 


| 
| 


two cameras, each pointing in opposite | 


directions, with one designed to show 
what the camera person is seeing, 


| he adds. 


Nogee says the value of certain visu- 


| al mobile applications is clear. For ex- 


ample, a realtor could send stil! photos 


of a home from a cell phone — but that | 


doesn’t take advantage of moving pic- 
tures at all, he adds. But Nogee ques- 


tions the value of videoconferencing 
| with a small device, given the ergo- 
| nomics involved. “Certainly, a lot of 
| businesses will have video mobile ap- 
| plications in five years in the U.S., and 
| the technology is not the stumbling 


block,” he says. “The question is 


| whether people will want to do it.” 


A recent survey from In-Stat shows 
that one in eight consumers today is 


generate significant revenue for carri- 
ers, says In-Stat analyst David Cham- 
berlain. The number of consumers 
purchasing mobile video content will 


| 
| 
| 


analysts note that this very group of 
13-to-18-year-old consumers will even- 
tually grow up and take jobs where 
they'll be challenging IT staffs to look 
for work-related mobile video applica- 


tions. @ 57255 
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VIDEO OVER MOBILE in a business 
setting is unquestionably cool, but 
some observers have raised ques- 
tions about how useful it will be. 

“Enterprises are going to be ask- 
ing, ‘Who is going to pay for this ap- 
plication?’ and they will constantly 
be grappling with the why and the 
business reason for it,” says Allen 
Nogee, an analyst at In-Stat. 

A big amplifier of today’s buzz 
around mobile video applications 
comes from network providers eager 
to sell minutes, and so far they've 
focused heavily on young users who 
might download video clips or play 
live TV with summaries of the latest 
sports scores, Nogee says. Not ex- 
actly business-centric uses. “The 
U.S. carriers are all talking about it, 
but our surveys of end users show 
only 10% to 15% want it,” he says. 

While Nogee acknowledges that 
there’s value in a still shot sent wire- 
lessly of a car accident or a building 
under construction, he adds, “What 
is the value of videoconferencing? 

“Converged technologies [involv- 
ing video and mobile] will happen in 
the consumer market, and whether 
that conflicts with use in an enter- 
prise remains to be seen,” he says. 

“You have the carriers hyping their 
new high-speed networks, and video- 
conferencing is an easy answer for what 
will be used, but I don't necessarily think 
it will be readily used,” Nogee says. He 
ing medicine, will find uses for training 
and information-sharing that can't be 
handled easily with still images. “In cer- 
tain verticals, video over mobile will be 
very important and refined,” Nogee 
says, “but they won't make up a large 
part of overall business.” 

- Matt Hamblen 
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Voice technologies now in the labs _ 


TECHNOLOGY 


mean the answer will be yes. 
By Linda Rosencrance 


"4 VERY FEW YEARS, researchers , firm in New York, says the next five 


say that automated voice 

recognition technology has 

finally arrived, but it seems 

as though the reality never 
lives up to the hype. 

For the past two decades, systems 
that enable touch-tone responses to 
automated voice prompts have been 
used by businesses for telephone- 
based routing and self-service. But to- 
day, a large number of businesses are 
investing in newer two-way interactive 
voice response (IVR) to move beyond 
the limitations of touch-tone. 

Datamonitor PLC, a market research 





years will see widespread deployment 
of IVR across companies, and the ap- 
plications of speech recognition will 
grow in complexity and sophistication. 
In particular, says Datamonitor ana- 
lyst Daniel Hong, “in the next five 
years, the market will witness several 
large voice-authentication deploy- 
ments, primarily in the financial ser- 
vices market, because of the increasing 
need for security and a proliferation of 
PIN/password-reset applications.” 
One company that offers such an ap- 
plication today is Nuance Communica- 
tions Inc. in Menlo Park, Calif. Here’s 





how Nuance’s system works: A caller 
spends a few moments “enrolling” his 
voice, creating a “voiceprint.” Then, 
when calling the application at a later 
time, his voice is compared with the 
voiceprint on file. If there’s a match, the 
caller is validated. 

In the next five years, there will 
also be a tighter integration between 
speech engines and speech applica- 
tions, which tend to be separate pieces 
of software today, says Jim Blake, a se- 
nior software engineer at San Diego- 
based LumenVox LLC. 

That will improve the accuracy of 
speech engines by enabling 
them to get clues about users 
and applications when they 
are stumped, he says. 

For example, if the speech 
engine in an airline reservation system 
recognizes the cities spoken by a user 
but not the flight numbers, it might ask 
the application for a list of possible 
flight numbers. “This is all done in one 
interaction,” Blake says. “Typically, 
if one section of the audio isn’t un- 
derstood well, the caller must be re- 
prompted for the missing information. 
But in our example, we are making the 
[speech recognizer] smarter by talking 
with the application.” 


Real Conversations 

Moreover, those applications will be 
able to handle a user’s request in a more 
human way, says Peter Mahoney, vice 
president of ScanSoft Inc., a supplier of 
speech software in Burlington, Mass. 

“Today, if you’re talking to an auto- 
mated system to make a flight reserva- 
tion, you have to tell the system what it 
wants to hear in the way it wants to 
hear it,” Mahoney says. The system 
will ask you where you're departing 
from, where you’re going and the date 
you want to leave. 

“However, in the next few years, the 
system will say, “Tell me about the trip 
you'd like to take,’ and you'll say, ‘I’d like 
to go from Boston to New York next 
Thursday, and by the way, I’m traveling 
with two people,” Mahoney says. “The 
intelligent system should be able to 
parse that all out, identify enough 
meaning from the pieces that are com- 
municated through the person’s dia- 
logue and then ask follow-up questions. 


it 
we 
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“Most speech applications today are 
completely unable to deal with conver- 
sations that deviate from a very tightly 
specified call flow, which means that 
when callers do deviate from the mod- 
el — and the data shows they deviate 
frequently — application performance 
and caller experience suffer,” he says. 
“By creating and implementing much 
more flexible dialogue management 
models, next-generation products will 
keep more callers in the application 
and allow them to converse with the 
application in a more efficient, more 


| natural manner.” 


One of the things that will 
drastically change in the 
world of voice recognition in 
the next several years is that 
vendors will provide cus- 
tomers with the tools necessary to eas- 
ily update their voice applications, says 
Azita Martin, vice president of market- 
ing at TuVox Inc., a Cupertino, Calif.- 
based supplier of enterprise software 
for speech applications. 

“Today ... the applications are hard 
to change,” she says. “So every time 
companies want to update their speech 
applications ... they have to call the 
vendor, and that’s very expensive.” 
Martin says vendors will come up with 
tools that have powerful graphical user 
interfaces so companies will be able to 
update their speech applications the 
same way they update their Web sites. 

In another development, researchers 
at IBM are working on software that 
recognizes emotions in speech. 

“We are working on making speech 
be expressive, which is to ... create the 
speech output that matches the mood 
of the person [using an IVR system],” 
says David Nahamoo, a manager in hu- 
man language technologies at IBM Re- 
search. “Is the person [delivering] good 
news, bad news, sad news or an angry 
message? We are trying to provide an 
automatic way to create any persona 
that a customer wants.” 

IBM is also working on a voice- 
recognition engine that can identify 
various accents and dialects, he says. 

“We need to keep improving on the 
performance of all of these engines 
year to year, to be able to support and 
address the growth in expectation by 
users,” Nahamoo says. @ 57440 





Simplify your |.T. and your business. IBM servers and storage are designed to 
help you do just that. Take the IBM TotalStorage* DS4100 Express with 
DACstore. It can help you reconfigure or add capacity while staying up and 
running. No need to stop to reset drives. 


Because with IBM Express, innovation comes standard. That's true for servers, 
storage and printers. What's more, you can keep your technologies current 
while helping to reduce costs — through IBM Global Financing 
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A STROLL THROUGH THE TECHNOLOGY LANDSCAPE 


Space Elevator 
Contestants 
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No one managed to win top honors in NASA's 
| Beam Power Challenge and its Tether Challenge, 
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_ Researchers Find Missing Link 


competitions to develop technologies that could be 


| 

| used in space elevators. The two $50,000 prizes 
went unawarded in last month's contests in Moun- 
tain View, Calif., because none of the 10 finalists 
managed to meet all of NASA's qualifying criteria 

To win the Beam Power Challenge, teams had to 
construct robotic climbers capable of climbing up 
and down a 50-meter cable in under 50 seconds, 
powered only by the light from a 10,000- watt 
searchlight. 

Inthe Tether Challenge, teams had to produce 
high-strength, low-weight tethers. Part of the com- 
petition was a head-to-head strength test, which 
was won by the Centaurus Aerospace team. To win 
the jackpot, though, the tether had to be 50% 
stronger than a commercially available material. In 


| 


Scientists at The University of Manchester in 
England have made a major breakthrough that 
could hold the key to creating the first practical 
quantum computers. 

Professor Richard Winpenny of the School 
of Chemistry and a team of in- 
ternational researchers have 
for the first time demonstrated 
how qubit (quantum bit) rings - 
pieces of quantum information 
- can be linked together. 

The research found that the 
qubit rings, when attached us- 
ing a hydrogen bond, remain 
stable ina resting state. twas —_— 
also found that the rings can be 
brought into close proximity 
without changing their magnetic 
behavior due to through-space 
exchange. This leads to the pos- 


sibility of a switch being incorporated that uses | 


the exchange of electrons within the bonds of 
molecules. 

The breakthrough, which foliows three years 
of research, opens up the possibility of being 


fact, although the Centaurus team’s tether man- 
aged to carry 544 kilograms before snapping, 
NASA's in-house tether was still stronger, register- 
ing 590 kilograms before it failed 


Both purses will roll over into next year’s contest, 


says NASA, and the competitions will be more diffi- 
cult: The teams will have to create their own power 
supplies for the climbing robots, and the tethers will 
have to be even stronger. 


Electron microscope image 
of a qubit from Hans Mooij's 
run re ei 
University of Technology. 


able to create quantum gates, a more advanced 
version of the processors found in modern 
computers. 

“Linking these molecules not only gives us a 
much better understanding of how these mole- 
cules interact, but it also gives 
us more control over how 
they interact, which is essen- 
tial if we are to ever success- 
fully implement quantum 
gates,” says Winpenny. “This 
is the start rather than the fin- 
ish in terms of the develop- 
ment of a quantum computer. 
But now that we have shown 
we can do this, it gives us 
Clear targets.” 

If built, quantum comput- 
ers would be the most power- 
ful computers ever made, 
with speeds millions of times faster than the av- 
erage PC for some calculations. Those speeds 
would be valuabie in factoring large numbers 
and therefore extremely useful for encrypting 
information. @ 57723 


Plans for WLANs 


For which of the following applications 
are you planning to use your wireless 
LAN in the next 12 months? 
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Congratulations 
Award Recipients! 


Computerworld’s Storage Networking World (SNW), in conjunction with “See 
the Storage Networking Industry Association (SNIA), proudly announces the aEnEaieentam 


results of the sixth SNW “Best Practices in Storage” Awards Program. This 


oe 
program honors IT user “best practice” case studies selected from a field B t P t 
of qualified finalists. 5 lac IceS 


IN STORAGE 


AWARDS PROGRAM 





Award Recipients in each of the following categories were recognized during an awards 
ceremony at Storage Networking World in Orlando, Florida, on October 26th: 


Systems Implementation E MC 
¢ Cerner Corporation, Lee’s Summit, Missouri ’ 
* Community Health, Indianapolis, Indiana 
Honorable Mentions: Coppin State University, Baltimore, Maryland 
Nationwide, Columbus, Ohio 
Saint Luke’s Health System, Lee’s Summit, Missouri 


where information lives’ 


Storage Reliability and Data Recovery 
* Carnegie Mellon University, Pittsburgh, Pennsylvania 
¢ William Beaumont Hospitals, Royal Oak, Michigan 
H>norable Mentions: Key Agency, Englewood, Florida 
National Instruments, Austin, Texas 
Primus Telecommunications, Etobicoke, Ontario 


Data Lifecycle Management 
* Palmetto Health, Columbia, South Carolina 
* SMART Communications, Inc., Makati City, Philippines 
Honorable Mentions: Arup, London, England 
Cancer Therapy and Research Center (CTRC), San Antonio, Texas 
Pacific Life Insurance Company, Newport Beach, California 


Industry Regulation Compliance and Corporate Governance 
¢ Dallas Morning News, Dallas, Texas 
* Memorial Sloan-Kettering Cancer Center, New York, New York 
Honorable Mentions: Ferrellgas, Overland Park, Kansas 
Leesport Financial Corporation, Reading, Pennsylvania 
Palmetto Health, Columbia, South Carolina 


Innovation and Promise 

¢ Baptist Memorial Health Care Corporation, Memphis, Tennessee 

¢ Navy Surface Combat Systems Center, Wallops Island, Virginia 
Honorable Mentions: AFLAC, Columbus, Georgia 


Mohawk Industries, Calhoun, Georgia 
Pratt & Whitney, East Hartford, Connecticut 
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How to Get a Job 
In the Infosec Field 


Lots of readers wondered where all those 
security jobs our manager talks about are, 
so she did alittle research. By C.J. Kelly 


Y DECISION to stay in 
my current job for 
quality-of-life rea- 
sons provoked emo- 
tional responses from several 
readers. Some of those who 
wrote to me about that column 
(QuickLink 57182] had made 
similar decisions. But a few, 
after reading about how I 
turned down multiple job 
offers, asked, “Where are all 
these jobs you keep 
talking about?” I felt 
compelled to do a lit- 
tle research on the in- 
formation security 
job market and pre- 
sent the results here. 

First, I did an un- 
scientific survey of the pub- 
licly posted jobs. In my case, 
most of the jobs I’ve had have 
come from personal referrals, 
so when I’m looking, the first 
thing I do is contact my net- 
work of friends and col- 
leagues. However, I have 
found that searching the job 
boards gives me a sense of 
the types of jobs that are out 
there, who’s hiring and ap- 
proximate salary ranges. 

I set out to answer five 
questions with this research: 

1. How many security jobs 
are out there? 

2. What types of security 
jobs are out there? 

3. What requirements do 
employers have for certifica- 
tions and degrees? 

4. What parts of the country 
have more security jobs than 
others? 

5. What are the salary 
ranges? 

Whenever I’m contacted by 
a recruiter looking for security 
professionals, I point him in 
the direction of the Interna- 
tional Information Systems 


SECURITY 





Security Certification Consor- 
tium Inc., or (ISC)’, which of- 
fers the Certified Information 
Systems Security Professional 
(CISSP) certification. When I 
checked its site, the (ISC)’ had 
over 80 security job postings, 
many with multiple positions, 
for the month of October. The 
positions ran the gamut from 
salespeople to technical secu- 
rity engineers, executives and 
consultants. The 
companies advertis- 
ing for security pro- 
fessionals were lo- 
cated all over the 
map, including 
Canada, England, 
Saudi Arabia and 
California. Eighty didn’t 

seem like a very big number, 
though, so I surfed to some 

of the major job boards. 

Each job board has its 
own way of making searching 
easier, but by searching for 
“CISSP” for October, I got the 
following results: Dice, 645 
matches; HotJobs, 1,000; 
CareerBuilder, 713; Monster, 
over 800 matches. 

There were plenty of job 
postings from the Big Four 
consulting houses looking for 
security types to do audit 
work, traveling 100% of the 
time for $40 per hour or less. 
For a qualified security profes- 
sional, that’s practically mini- 


You need to know 
what you are best at 
and look for jobs that 
match your skill set. 








mum wage. Working for one 
of the Big Four looks good on 
your résumé, gives you a lot of 
experience (primarily in IT 
audit) and makes you an ex- 
pert in dealing with airports, 
hotels and rental car compa- 
nies. I would exclude the big 
consulting companies. They 
charge exorbitant prices, but 
very little of that goes to the 
consultant who does the job. I 
also think companies would 
do better hiring full-time secu- 
rity people and internal audi- 
tors. (No offense to you Infor- 
mation Systems Audit and 
Control Association types; I 
am also a member!) 

The biggest problem with 
searching was finding the 
right security job description 
for me. There’s no real agree- 
ment on what constitutes a se- 
curity engineer as opposed to 
a security analyst or a security 
architect. Executive positions 
(director level and above) 
aren’t always posted, but those 
that are seem to be fairly clear 
about requirements. 


Types of Jobs 
The answer to the question 
about the types of jobs out 
there: You need to know what 
you are best at and look for 
jobs that match your skill set. 
There are plenty of opportuni- 
ties, though many of them are 
ill defined. Many companies 
don’t really know what they 
want and need, so you have to 
keep knocking on doors until 
you find one that swings open 
enthusiastically. 

As for certifications and 
degrees, my first conclusion 
is that you should finish that 
bachelor’s degree if you haven’t 
already done so. Not too long 
ago, technical people were 
hired based on a particular 
skill set, not necessarily on 
formal education. But the 
trend now is toward demand- 
ing that sheepskin, and a bach- 








elor’s degree seems to be the 
minimum requirement for a 
large number of posted jobs. 
In many cases, a master’s de- 
gree is desired. I also found 
that employers want degrees 
to be supplemented by a string 
of technical certifications. The 
bar seems to be rising. 

The CISSP is a very popular 
and highly regarded certifica- 
tion, but the SANS Institute 
also offers an excellent certifi- 
cation series that’s highly re- 
spected. As Linux becomes 
more mainstream, Red Hat 
certifications are growing in 
importance. Microsoft offers 
the MCSE+ security certifica- 
tion. And let’s not forget Cis- 
co. There are many certifica- 
tion programs, but these are 
on the short list. They are all 
valuable, each with a different 
emphasis. The trick is to find 
the openings that fit your cer- 
tifications and skills, and just 
keep knocking on those doors 

In the U.S., the West and 
East Coasts appear to have 
more security jobs than other 
parts of the country, and they 
pay more — sometimes two to 
three times as much. Just re- 
member that the cost of living 
matches those increased pay 
scales. I noticed that the job 
boards all have ways of doing 
area or metro searches, so with 
a little practice you should 
become fairly proficient at 
searching various locales for 
particular kinds of jobs. 

As for salaries, they’ve been 
all over the map in recent 
years, and employers seem to 
be hesitant to post anything 
specific about them. Just re- 
member to value yourself and 
your skills in advance so that 
when you are contacted by a 
prospective employer, you will 
be confident in your market 
value. Remember, it’s not 
about the money. It’s about do- 
ing what you love where you 
love to do it. D 


WHAT DO YOU THINK? 


This week's journal is written by a real 
security manager, “C.J. Kelly,” whose 
name and employer have been disguised 
for obvious reasons. Contact her at 
mscjkelly@yahoo.com, or join the dis- 
cussion in our forum: QuickLink a1590 


To find a complete archive of our 
Security Manager's Journals, go online to 


@ computerworld.com/secjournal 
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Security Bookshelf 


wouldn't be held liable for data 
theft or leaks. The legislation 
would hold cybercafes and 
search engines liable for data 
theft. Cyberlaw expert Pavan 
Duggal told India’s Business 
Standard that the law “will 
spell disaster” for the BPO 
industry in India. 





With Sybase’ software, the PRC Ministry of Railways 
developed an innovative ticket sales and reservation system that: 


Processes passenger traffic of more than one billion people a year 
Handles up to 5,000 ticket requests simultaneously 


[.) Captures and analyzes passenger data on national, regional and local levels 


Replacing an outdated, paper-based ticketing system that supports one of the largest railway networks in the world is a monumental task. That’s why 
when the People’s Republic of China (PRC) Ministry of Railways wanted the right technology partner, they chose Sybase. Using Sybase Adapt erver® 
Enterprise, Sybase® IQ, and Replication Server® software, the PRC created an information edge that enables passengers to purchase round-trip or 


one-way tickets from 24 regional ticket centers, 510 booking systems and over 5,000 counter terminals. That means customers are happier. Employee 


SYBASE 


productivity is up. And trains are filled with people...and profits. www.sybase.com/infoedge116 
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Tizor Launches 
Auditing Appliance 
® Tizor Systems Inc. in Maynard, 
Mass., has unveiled a new add-in 
network appliance that allows 
companies to monitor and audit 
employee activities with mission- 
critical applications and data in 
real time. Designed to help pro- 
tect against data theft, the 
Mantra Activity Auditing appli- 
ance supports Oracle, Sybase 
and SQL Server databases and 
Windows file servers. It uses real- 
time analytics that include behav- 
ioral fingerprinting; instant snap- 
shots of multiple policies for 
security, operations and senior 
management; and on-demand 
compliance checks, said the 
company. Mantra, which starts 
at $25,000, is managed using a 
Web browser-based interface. 


Verano Upgrades 
Security Appliance 
@ Verano Inc. in Mansfield, Mass., 
has introduced Industrial Defend- 
er 2.0. The latest version of Vera- 
no’s security appliance suite fea- 
tures enhanced security agents, 
customizable reporting and analy- 
sis, and increased scalability. It’s 
geared for power transmission 
and distribution systems, water 
distribution and treatment equip- 
ment, gas and liquid pipelines, 
mass-transit systems and power- 
generation companies. Pricing for 
the Industrial Defender console is 
$10,000; the Industrial Defender 
Guard starts at $1,800 for net- 
work perimeter protection. 


Oracle to Integrate 
PeopleSoft Apps 


® Oracle Corp. announced that it 
will integrate the Strategic Net- 
work Optimization and Produc- 
tion Scheduling products from the 
PeopleSoft Supply Chain Planning 
suite into its E-Business Suite 11i 
Advanced Planning and Schedul- 
ing application. The integrated 
offering is meant to improve 
supply chain efficiency and re- 
duce risk. it will ship in 2006, 
according to Oracle. 
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earching for 
Root Cause 


N A PREVIOUS COLUMN, I outlined the five steps 
in the problem management process: detection, 
identification, determination, resolution and re- 
flection [QuickLink 56047]. I explained how new 
technologies will be required to help IT adminis- 
trators determine the root causes of IT problems. 


But how do IT adminis- 
trators determine them to- 
day? One of the most criti- 
cal steps is to go through 
the vast ocean of log data 
generated by the IT infra- 
structure, including router, 
switch, firewall, server, 

Web server and application 
logs. The logs contain a 
wealth of information, such 
as debugging or error data, 
that’s not available any- 
where else. 

Searching through these 
logs is usually the most ef- 
fective way for IT adminis- 
trators to determine the 
root cause of a problem. The way it’s 
done traditionally, however, using 
Grep or other Unix tools, is extremely 
inefficient for several reasons. 

First of all, the Unix tools aren’t 
made to perform extremely fast 
searches through logs. They’re de- 
signed to search through files line by 
line, starting from the top, until some 
entry matches the search requirement. 
This can be an excruciating process 
because the matching entries could be 
buried at the end of a huge log file that 
may be tens of gigabytes. 

Second, these tools have no concept 
of time. Almost all logs have time 
stamps and can tell IT administrators 
what happened at that specific mo- 
ment in time. However, the Unix tools 
don’t recognize this time stamp. Imag- 
ine that you want to search for only a 
five-minute block near the end of the 





day, and the log file is a 
day’s worth of data. The 
Unix tools will start 
searching from the start of 
the file and will take a very 
long time to get to the de- 
sired five-minute block. 
Third, there is no effec- 
tive way to express sophis- 
ticated search commands 
with the tools. For exam- 
ple, to search for logs that 
have either words login 
or logon, but not root or 
zhenjl, the IT administra- 
tor would have to connect 
a set of sophisticated Unix 
commands together. 
Finally, when the IT administrator 
finds the desired log entry, there’s no 
efficient way to drill down to find out 
what came before or after that entry. 
It’s extremely important to do that, 
since the root cause usually comes 
before the actual problem. 
So, how can IT administrators make 
root-cause analysis more efficient? 
The answer lies in the hottest tech- 
nology in the IT world today: full-text 


indexed Boolean search. This technol- | 


ogy is used by all search engines, in- 
cluding Google, Yahoo and MSN, to 
quickly return the desired results to 
users in seconds. By applying full-text 
indexing to all log data, IT administra- 
tors can reap the same benefit. 
Indexing log data means breaking 
each of the log entries into tokens, or 
words. The location of each token is 
stored in a special dictionary called an 





index file. The creation of this index 
file doesn’t affect the integrity of the 
original logs, which is a critical re- 
quirement for regulatory compliance. 
Special care also has to be applied to 
ensure that all time stamps of tokens 
are remembered so searches can be 
optimized. 

Once this index file is created, IT 
administrators can then instantly lo- 
cate the desired logs through Boolean 
searches. Such a search can consist 
of a single word or multiple words. 
These words can be connected using 
special Boolean operators such as 
AND, OR, NOT and parentheses. Wild 
cards such as “*” can also be applied 
to these words. 

For example, to locate logs that 
match the earlier criteria, the IT ad- 
ministrator would simply create a 
Boolean search expression like “(login 
OR logon) AND NOT (root OR zhen- 
jl.” IT admins can further restrict the 
result set by simply adding new condi- 
tions using Boolean operators. By 
adding a time frame to the search, 


| the log search engine will also jump 


to the desired time without searching 
through all the unnecessary logs. 

Unlike the Web search engines, 
where index files are updated only pe- 
riodically, the log search engines can 
index data in real time, usually tens of 
thousands of log messages per second. 
This real-time component gives IT ad- 
ministrators the fastest way to locate 
what they need. 

Search technology has been applied 
in many ways, including Web search 
and desktop search. Applying it to the 
vast ocean of infrastructure log data 
will no doubt make root-cause and 
forensic analysis much easier for IT 
administrators. @ 57894 
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YOUR JOB IS TO KEEP SYSTEMS AND APPLICATIONS RUNNING. 
OUR MISSION IS TO KEEP PEOPLE AND INFORMATION CONNECTED. 
LET’S WORK TOGETHER. 


Continuous access to information no matter what. That’s 
Information Availability. It’s what your employees, suppliers and 
customers demand every minute of every day. But to deliver it 
flawlessly, you need a massive global infrastructure, redundant 
systems and diverse networks being monitored and supported 
by skilled technical experts at secure facilities. That’s exactly 
what SunGard provides. 


As a result, we can offer you a higher level of availability and 
save your company, on average, 25% versus building the 
infrastructure yourself. Plus, it’s a vendor neutral solution that 
lets you control your data,applications and network while giving 
you the flexibility to adjust to the changing needs of your 
business, But best of all, it lets you spend more time solving 
business problems and less time solving technical problems. 


For years, companies around the worid have turned to 
SunGard to restore their systems when something went 
wrong. So, it’s not surprising that they're now turning to us 
to mitigate risk and make sure they never go down in the 
first place. 


You want your network and systems to always be up and 
running. We want the same thing. Let’s get together. fo 
learn more, visit www.availabilitysungard.com or call 
1-800-468-7483. 


SUNGARD (‘352-2 
q and Information 
Availability Services | Connected.“ 


“Potential savings based on IDC White Paper, Ensuring Information Availability: 
Aligning Customer Needs with an Optimal investment Strategy. 
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Business Intelligence made a promise: to make it simple for everyone to use information to make 
better decisions. But, given your complex IT infrastructure, the reality of getting a single BI standard 
in place across the company has been anything but simple. Until now. 


Introducing Cognos 8 Business Intelligence, the one solution built to break down the barriers limiting 
BI’s potential. With a complete Web Services-based SOA. A simple browser-based interface. A full range 

of BI capabilities — reporting, analysis, scorecarding, dashboarding and more — all in a single product 
and on a single architecture. And the BI foundation for companies demanding a simpler path to a complete 
performance management system. 


It’s everything BI promised to be. And now, it’s here. 
To learn more and to find out where you can preview Cognos 8, go to cognos.com/simple 


COGNOS 8 BUSINESS INTELLIGENCE. 
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THE NEXT LEVEL OF PERFORMANCE™ 


Copyright © 2005 Cognos Incorporated, Ail rights reserved. 





i 


| MANAGEMENT 


Double Dipping on Sarb-Ox Career Watch 


OPINION 
You’re Fired! 





No doubt about it: Sarbanes-Oxley A young mainframer sees infinite | Firing a subordinate can be emotionally 
compliance can be pricey. But with | opportunities; the loss of tech jobs debilitating to a manager, but Paul Glen 
creativity and foresight, some companies | continues; and why women pursue | tells how you can minimize the angst 


are getting a lot more out of their careers in IT. Page 46 
compliance budgets. Page 42 


Page 48 


Today’s hottest global 
markets are steeped in 
counterfeit IT products. 
Here’s how to minimize 


your company’s exposure. 
g a 


DWARD MACNAMARA was impressed 
with the local company he had hired to 
help open a new office in Beijing. The 
vendor had offered to install a suite of 
Microsoft products on the computers 
right away. 

But Macnamara’s favorable view quickly turned 
with the vendor’s follow-up question: “Do you 
want Microsoft today, or do you want to wait for 
the real thing?” 

As chief technology officer at Wilmer Cutler 
Pickering Hale and Dorr LLP, a law firm based in 
ss @ Boston and Washington, Mac- 

namara had been warned about 


BY MARY | software piracy. Still, he says, he 
K. PRATT was surprised by the vendor’s 


brazen behavior. 
2 @ ~=CExperts aren’t so shocked, 
though. They point to statistics that show ram- 
pant use of pirated software and counterfeit hard- 
ware in the U.S. as well as overseas. The problem 
is on the rise, as U.S. companies expand opera- 
tions into countries where illegal use of IT prod- 
ucts is widespread and enforcement of intellectu- 
al property laws is minimal. 

For example, New York-based audit, tax and 
advisory firm KPMG LLP and the Fremont, Calif.- 
based Alliance for Gray Market and Counterfeit 
Abatement (AGMA) recently reported that as 
much as 10% of all high-tech products sold glob- 
ally is counterfeit. And the Business Software 
Alliance (BSA) estimates that one-third of the 
software in use worldwide is pirated. The Wash- 
ington-based organization also says that while 
the U.S. has the lowest piracy rate of any country, 
it’s still a disappointing 21%. 

To complicate matters, some of the hottest 
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spots in the global marketplace are the 
worst offenders. 

For example, in China, 90% of soft- 
ware installed on computers is pirated, 
according to the second annual survey 
on piracy conducted last year by the 
BSA and market research firm IDC. 
Only Vietnam and Ukraine had higher 
piracy rates, at 92% and 91%, respec- 
tively, and more than a dozen other 
countries had rates of 80% or higher. 


Cultural Challenge 

According to AGMA and KPMG, Chi- 
na is among the countries where coun- 
terfeiting IT products has become a 
cultural norm. Their report says that 
“China attracts a huge influx of foreign 
direct investment resulting in high 
technology capability with adopted 
know-how, accessible distribution in 
densely populated areas and inconsis- 
tent regulatory enforcement.” 

Those factors — coupled with 
low wages, high unemployment and 
a largely uneducated workforce — 
create a favorable setting for counter- 
feiting, the report says. 

The result: In countries like China, 
“the likelihood of buying counterfeit 
products is higher — and it might be 
more acceptable,” says 
Gary Matuszak, global in- 
dustry leader for electron- 
ics, software and services 
at KPMG. 

That’s particularly true 
for companies that employ 
local workers in their for- 
eign offices, says Avi Barir, 
vice president of software 
digital rights management 
at Aladdin Knowledge Sys- 
tems Ltd. in Israel. 

“The cultures in these 
countries are such that lo- 
cal employees in [foreign 
offices of] U.S. companies 
would act the same as em- 
ployees in local compa- 
nies,” says Barir, whose 
company makes products 
to help manufacturers pre- 
vent illegal use of their 
software. 

That means your Chi- 
nese workforce may not be 
culturally attuned to the 
fact that counterfeiting is 
not acceptable. But it’s es- 
sential that your employees 
here and abroad take the 
issue very seriously, for 
financial as well as ethical 
reasons. 

Counterfeiting isn’t just 
about losing a few bucks on 


SOURCE: SECOND ANNUAL BSA 
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| bad software or hardware. Counterfeit 


and pirated products expose compa- 
nies to worms, viruses and system fail- 


| ures, as well as potential lawsuits for 


copyright and patent infringements. 


Hard to Spot 


Aside from software, the products tar- 


| geted by counterfeiters are often low- 
| cost items that companies buy in high 


numbers, such as servers, laptops, cell 
phones, monitors, hard drives and net- 
work interface cards. 

Counterfeiters often reverse- 
engineer the items, slap on fake logos 
and ship them out. Sometimes the 
quality is poor, but the doctored ver- 
sions can often fool even tech folks. 

Still, industry leaders agree that the 
problem could be kept in check if glob- 
al companies put more controls in 
place to ensure that they and their 
international counterparts don’t buy 
fakes. They say relatively simple mea- 
sures could significantly reduce the 
volume of illegal IT products used in 
U.S. companies and abroad. 

“Certainly, there are things CIOs can 
watch out for to mitigate, if not pre- 
vent, the purchase of counterfeit prod- 
ucts,” says Matuszak. 

Here are some simple 
procedures that can lower 
your risk of buying coun- 
terfeit IT products. 

Educate your workforce 
about the problem. CIOs need 
to instruct anyone autho- 
rized to buy IT equipment 
and supplies about how to 
avoid buying counterfeits. 

Establish rules for purchas- 
ing hardware and software. 
For example, Matuszak 
says, decree that all cell 
phone purchases be made 
through the purchasing 
office by someone who 
knows how to guarantee 
that the product is legiti- 
mate. 

Don’t trust unknown ven- 
dors. Christian Lau, assis- 
tant vice president of IT at 
Franchise Services Inc. in 
Mission Viejo, Calif., the 
parent company of several 
franchise brands, buys only 
from an established retailer 
or directly from the manu- 
facturers. And the com- 
pany doesn’t allow anyone 
outside the IT department 
to install software. 

“Where you're getting 
into trouble is when you 
try to go through [un- 
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known] resellers, or you buy on the 
used market or the international mar- 
ket, where you don’t know the source,” 
says Steve Bandrowczak, CIO at Leno- 
vo Group Ltd. in Purchase, N.Y. 

Be suspicious of highly discounted prod- 
ucts. “A good price from someone you 
never heard of is probably a tip-off,” 
says Nick Tidd, president of AGMA 
and vice president of sales and busi- 
ness compliance at 3Com Corp. in 
Marlboro, Mass. 

Don’t pass up a good deal out of fear, 
though. Tidd and others say there are 
companies — some of which might not 
be authorized dealers — that sell legit- 
imate products at steep discounts. 

“You can always call on the serial 
number and see if you’re getting some- 
thing legit,” says Randall Palm, chief 
technology and information security 
director at the Computing Technology 
Industry Association Inc. (CompTIA) 
in Oakbrook Terrace, Ill. “Trust, but 
verify.” 

Don’t be fooled by the presence of Web 
sites, business cards and other professional 
representations. Experts say that gray- 
market dealers often have all the trap- 
pings of legitimacy to allay customers’ 
suspicions. 

Ensure that domestic purchasing poli- 
cies are followed in overseas offices. “I 
wouldn't go as far as saying everything 
has to be controlled centrally by pur- 
chasing only in the U.S., but you need 
to educate and follow through to make 
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sure the China-based buyer is buying 
from an authorized [vendor or manu- 
facturer],” Matuszak says. 

Bundle counterfeiting with other security 
issues. “If you’re a CIO, you should 
have an information security/cyber- 
crime policy in effect,” says Frank 
Taney, chairman of the IT litigation 
practice group at Buchanan Ingersoll 
PC, a law firm in Philadelphia. 

Foster a culture where counterfeiting 
and piracy of any kind is not tolerated. 
Paramount Pictures Corp., for exam- 
ple, requires managers to attend an 
annual meeting addressing business 
and ethical practices and to sign a 
business conduct statement each 
year, says Ed Trainor, senior vice pres- 
ident of information systems at the Los 
Angeles-based company and former 
president of the Society for Informa- 
tion Management. Policies against 
copyright infringement and illegal 
copying of materials are among the 
subjects covered. 

There’s nothing new about counter- 
feiting, Taney says, “but it is news toa 
lot of companies that this is a serious 
issue that they have to manage.” 

With counterfeit goods, even cheap 
ones, he says, “you're really not getting 
the value you think for your procure- 
ment dollars.” @ 57675 


Pratt is a Computerworld contributing 
writer in Waltham, Mass. Contact her at 
marykpratt@verizon.net. 





MOST EMPLOYEES CAN'T EVEN SEE THEIR DESK 
MUCH LESS WORRY ABOUT ENSURING COMPLIANCE 


Reduce compliance risk and email storage requirements with automated email management. 


Email gives you 35 billion reasons every business day to find a better way to manage it. Email must meet the 
same rigorous compliance mandates as other corporate documents. Inadequate storage, human error, and 
inconsistent policy enforcement put you at risk. FileNet Email Manager with exclusive ZeroClick technology 
automates your entire email management lifecycle — minimizing human interaction, improving productivity and 
mitigating storage needs. It's much more than an archival solution. Together with FileNet Records Manager, 
email can now be fully managed without user interaction or costly infrastructure. The leading choice of global 


enterprises, you won't find a better email management solution anywhere. (We know your employees can't.) 





Learn how to make better decisions, faster. 


Download the Email Management white paper at 
www.filenet.com/emailwp 
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ENTION the Sarbanes- | aslightly different filter,” says Van 


Oxley Act to a CIO or 
a corporate executive, 
and he’s likely to roll 
his eyes or grimace. 

That’s because most executives view 
the compliance requirements as a grim 
burden, like cleaning out a pack rat’s 
basement. 

Large public companies have had to 
devote thousands of staff hours and in- 
vest millions of dollars to identify, doc- 
ument and audit internal controls 
within their organizations just to com- 
ply with Section 404 of the federal 
law. Often the result has been that 
other strategic initiatives and revenue- 
enhancing IT projects had to be put 
on the back burner. 

Those pressures have continued 
unabated in 2005. U.S. companies are 
expected to spend nearly $15.5 billion 
on compliance-related activities this 
year, with technology spending on 
Sarbanes-Oxley alone expected to top 
$1.7 billion, according to Boston-based 
AMR Research Inc. 

Mindful of these investments, some 
savvy companies have leveraged their 
Sarbanes-Oxley spending to benefit 
the business in ways that go beyond 
mere regulatory compliance, yielding 
more bang for the buck. 

Northbrook, Ill.-based Allstate In- 
surance Co., for example, has adopted 
a holistic view of regulatory compli- 
ance, including steps it has taken to 
address the requirements of Sarbanes- 
Oxley, the Gramm-Leach-Bliley Act 
and the Health Insurance Portability 
and Accountability Act, says Kim 
Van Nostern, Allstate’s chief informa- 
tion security officer. “We recognize 
that all those regulations require the 
same types of controls; they just apply 





Nostern. 

Two years ago, Allstate developed 
its own compliance and control man- 
agement system to help document 
controls in its various IT divisions. 
One of those tools is a scanning system 
created last year to identify worms and 
viruses and prevent them from attack- 
ing any of Allstate’s systems. 

Beyond helping Allstate ensure that 
it has effective security controls in or- 
der to comply with Sarbanes-Oxley, 
the scanning tool has delivered a nice 
side benefit. It enables the company’s 
asset management specialists to con- 
stantly survey Allstate’s corporate 
network and identify and track PCs, 
servers and other pieces of equipment 
that they previously didn’t have a 
record of, says Van Nostern. 


Catching Exceptions 

At the end of 2004, American Electric 
Power Co. (AEP) began using software 
from Oversight Systems Inc. in Atlanta 
to help it monitor transactions in its 
accounts payable group. If a manager 
authorizes a purchase above his spend- 
ing limit, the system recognizes it and 
spits out an exception report, says 
Mike Sullivan, assistant controller 

at the Columbus, Ohio-based power 
company. 

Those capabilities have helped AEP 
comply with Section 404 require- 
ments. But the company has also been 
able to use the software to determine 
whether any of its IT staffers or other 
workers have tried to modify software 
fields in other transaction systems for 
fraudulent purposes, says Sullivan. 

The company plans to extend the 
use of the software to its accounts 

Continued on page 44 


Some companies are leveraging Sarbanes-Oxley investments for business; 
others are leveraging business investments to comply. By Thomas Hoffman 
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We recognize 
that all those 
regulations 
require the same 
types of controls; 
they just apply 
a slightly 
different filter. 


KIM VAN NOSTERN, CHIEF 
INFORMATION SECURITY OFFICER, 
ALLSTATE INSURANCE 


Continued from page 42 

receivable department by year’s end. 
“We should see some operational sav- 
ings once we go through another [Sec- 
tion 404] cycle,” Sullivan says, because 
AEP will be able to cut back on some 
of its internal controls testing. 

In late 2000, San Ramon, Calif.- 
based Chevron Corp. purchased Price- 
waterhouseCoopers’ Enterprise Secu- 
rity Architecture System (ESAS) to 
help it document its information secu- 


rity strategies. Since then, the software, 


which has been acquired by McLean, 
Va.-based Brabeion Inc., has helped 
Chevron develop a central repository 
for all of its security policies and con- 
trols, says Jay White, global informa- 
tion protection architect at Chevron. 
“We were fortunate in having ESAS 
in place before Sarbanes-Oxley went 
into effect,” says White. “We discov- 
ered that if you’re ESAS-compliant, 
you’re Sarbanes-Oxley-compliant.” 
The software, which Chevron runs 
on Windows 2000 supported by an 
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Oracle database, has provided the 
energy company with multiple bene- 
fits beyond documenting its security 
controls to comply with Section 404. 
ESAS, says White, “is like an instruc- 
tion manual we’ve been able to use to 
formulate our information security 
strategy.” 


Streamlining Audits 

In 2002, Regions Financial Corp. pur- 
chased AutoAudit, an automated au- 
diting tool from Cokato, Minn.-based 
Paisley Consulting Inc. The Birming- 
ham, Ala.-based financial services 
firm has been using the software to 
help its mortgage division capture and 
document all bills and invoices that 
might be needed for quality control 
audits, says senior audit manager 
Kevin Sullivan. 

Regions has also customized the 
product to handle quality assurance 
reviews for its information security 
and internal audit groups, he says. 
Since then, the company has used 
AutoAudit and Paisley’s RiskNavigator 
tools to help its officers certify that 
controls are in place to support various 
business processes as part of its Sar- 
banes-Oxley compliance efforts. But 
the tools have yielded other wide- 
ranging benefits, says Sullivan. 

For instance, before the financial 
services company began using the 
AutoAudit system, each of its 13 inter- 
nal audit groups — which monitor its 
trust, mortgage and other business 
units — had to create a new database 
in Lotus Notes prior to conducting an 
audit. Since Regions conducts between 
200 and 300 internal audits per year, 
“we had all these different databases 
out there for administrative purposes,” 
says Sullivan. 

The company used the AutoAudit 
tool to consolidate those databases 
into a single system, thus generating 
efficiency gains for its internal audit 
department, he says. Sullivan says that 
the system has freed up auditors to do 


audits instead of devoting time to man- | 


aging the hundreds of databases that 
were once in use. 

Looking ahead, Regions hopes to use 
RiskNavigator to help it automate con- 
trols assessments in its burgeoning en- 
terprise risk management activities. 

No doubt about it: Sarbanes-Oxley 
compliance can be pricey. But with 
creativity and foresight, some compa- 
nies are getting a lot more out of their 
compliance budgets. @ 57668 


While some companies have double dipped on Sarbanes-Oxley com- 
pliance efforts to squeeze out additional business benefits, others 
have taken the opposite route: leveraging previous or unrelated soft- 
ware investments to address Section 404. 


Fairchild Semiconductor 

In August, Fairchild Semiconductor International Inc. installed software from 
MetricStream Inc. to help it streamline and improve its quality-related business proc- 
esses. Fairchild has operations and plants around the world, from Malaysia to Germany, 
and it wanted to ensure commonality among the business processes in place at its various 
locations. For example, it was looking for a standard way of handling customer returns from 
a quality control standpoint, says Mark Rioux, vice president of global quality and reliability 
at the South Portland, Maine-based company. 

The Web-based software should help Fairchild reduce the time required for customer 
transactions, in part by handling customer requirements more efficiently. But a byproduct 
of the software is that it’s providing the company with auditable quality controls that will 
help it achieve Section 404 compliance, says Rioux. 

“When we make a process change within our technology, the software allows us to de- 
tail what change is occurring, what product is going to be affected and when the change is 
expected to occur,” he adds. 


re. s 
Vintage Petroleum 
Vintage Petroleum Inc. in Tulsa, Okla., began using Open Text Corp.'s LiveLink 
software in its accounts payable department in 2001 to scan and track invoices that might 
otherwise get buried under the paperwork for the company’s engineers, says Carrie Daigle, 
a network analyst at the independent oil and gas company. 

But LiveLink, which runs on one of the company's Windows 2000 servers, also pro- 
vides an audit trail for the accounting department to show when a payment for an invoice 
has been approved and by whom. That's the kind of control that external auditors look for 
companies to demonstrate as part of their Section 404 compliance activities. 


‘ ~ ~ 
American Standard Cos. 

In June 2004, American Standard Cos. in Piscataway, N.J., installed a system called 
the SAP Compliance Calibrator from Virsa Systems Inc. in Fremont, Calif. 

The software was intended to ensure that the 5,000-plus global users of the company's 
SAP ERP system had appropriate segregation of duties, says Johann Erasmus, manager of 
quality and process improvement for American Standard’s internal audit team. The soft- 
ware enables employees who use the SAP system to access only those functions that are 
pertinent to their roles, says Erasmus. “It makes the process a lot less risky,” he says. 

But the system also helps the plumbing fixture and faucet manufacturer comply with 
Sarbanes-Oxley because it puts effective security controls in place for its financial and 
transaction systems. 

- Thomas Hoffman 
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to the mainframe world, as baby 
boomers begin to retire and young 
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uate who has realized that the 
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Were you the odd man out in your Texas 
State University class, entering the 
world of mainframe computing? Definite- 
ly. While at Texas State, | never met anyone 
who considered the mainframe to be a viable 
platform on which to build a career, much less 
anyone making the concerted effort to work 
with mainframes. Open-source, a.k.a. Linux, 
was what the majority of computer science 
students were moving toward, but they as- 
sumed they would work on Windows. 

When talking with friends from college 
about mainframe development at BMC, | al- 
ways hear surprise that development is still 
occurring and that | am willing to work in a 
‘doomed field.” The emphasis in school is 
on new trends. | suspect that, since students 
never work with or research mainframes, it 
creates the incorrect assumption that they are 
a thing of the past. 
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When did you decide to head in that 
direction? I'm lucky to be a second-genera- 
tion programmer, and as | was looking for 
internships during my sophomore year, my 
mother heard from a former co-worker that 
BMC had created a mainframe internship pro- 
gram. The following two summers, | worked 
as a QA intern on the Recovery Manager solu- 
tion. Those experiences demonstrated the 
dynamic nature of the mainframe. 


Did the program at Texas State ade- 
quately prepare you for mainframe pro- 
gramming? Most of our development is 
actually done in Windows, and we use a build 
process that makes it easy to port over to the 
mainframe. Since my education focused on 
C/C++, | was prepared in that sense. On the 
other hand, I've never encountered anything 
like the mainframe [user interface]. When 
you're first getting into the mainframe, you 
suddenly need to understand what SDSF, 
TSO, ISPF and JES mean. What you achieve 
onaPC by double-clicking on a folder involves 
typing a command like “dslist ‘myid.thisdata.*”" 
ona command line on the mainframe. Fortu- 
nately, | work with experienced mainframe de- 
velopers who can help with all tasks, from 
complex to trivial. 

On that note, one aspect of my mainframe 
career that is particularly appealing is that 
most programmers my age don't give the 
mainframe a second thought. At the same 
time, the supply of experienced mainframe 
programmers is going to diminish rapidly over 
the next couple of decades. The market for 
mainframe developers could resemble that for 
Cobol programmers just before Y2k. Cobol 
had been on the way out, yet programmers 
with Cobol experience were highly sought 
after during the late 90s. The mainframe has 
been “on the way out” for years, but it remains 
strong, and the need for mainframe develop- 
ers is even stronger. 
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ECHNOLOGY-SECTOR job cuts for 


the first three quarters of the year {| 


were up 18.8% over the same pe- 

riod in 2004, according to Challenger, 
Gray & Christmas Inc., a global out- 
placement company in Chicago. 

There are some promising indicators, 
according to Challenger. The number of 
cuts announced between July and Sep- 
tember was 24% lower than the 54,701 
job cuts reported during the same peri- 
od in 2004, according to the survey. 
But unlike other U.S. industries that 
have seen cuts, the tech segment has 
lost jobs without a similar rate of hiring 
to offset the cuts, John Challenger, CEO 
of the company, said in a statement. 

The only significant tech-sector job 


Balance 


Percentage of respondents who say they 
are satisfied with the way they balance 
personal and workplace demands. 


10% ini 
78% sexe 
82% sae 


BASE: 1,891 employees nationwide 
SOURCE: Rasmussen Reports LLC, August 2005 


| puter systems design and related ser- 
vices grew by about 30,000 since Sep- 
tember 2004. Management and techni- 
cal consulting service firms also added 
about 29,000 jobs during that period. 
~ Todd R. Weiss 


Gone in Three Quarters 


TECH-SECTOR JOB CUTS: 


Number of ClOs who believe 
their jobs are at risk because 
they aren’t delivering results 
fast enough to satisfy 
company leaders. 


SOURCE: Gartner inc. preconference survey of 
attendees at October's Gartner Symposium/!Txpo 


Women and the 
Unexamined IT Life 


The Collegiate Times, the student 
newspaper at Virginia Tech, re- 
ports that three scholars at the 
school have identified five factors 
that influence women who are 
interested in or are pursuing ca- 
reers in IT. The article says study 
participants had certain shared 
characteristics, including minori- 
ty status and parents — especially 
mothers — who supported their 
career choices. The National Sci- 
ence Foundation-funded study 
(which included telephone inter- 
views with and surveys of 1,026 
young women at high schools, 
universities and community col- 
leges across Virginia) found that 


they began using a computer at an 
early age for communication and 
information purposes, not usually 
to play computer games like their 
male peers, and have a positive 
view of IT professionals and their 
careers. They don’t think about 

it in terms of being a “geek” or 
“nerd,” said one researcher. Most 
interesting, perhaps, is the finding 
that these women haven’t dis- 
cussed career options with many 
others, the researcher said. In 
fact, those who seek more infor- 
mation tend to be less interested 
in pursing a career in IT. @ 57904 


Page compiled by Jamie Eckle. 





Innovations by InterSystems 


Messaging, plus... Composite Application Development, plus... 


Business Process Orchestration, plus... Business Activity Monitoring 


Integrate Your Enterprise. 
Ensemble Will Get You To The Finish Line Faster. 


Ensemble’s innovations will enable you to successfully integrate your enterprise faster. Much faster. 

This is the first platform to offer a seamless ensemble of integration and development technologies 
for every type of integration project. Ensemble’s universal integration platform is the innovative 
fusion of an integration server, data server, application server, and portal development software 
With its single development and management environment, Ensemble will dramatically reduce your 
time-to-solution. 

We back these claims with this money-back guarantee: For up to one year after you purchase 
Ensemble, if you are unhappy for any reason, we'll refund 100% of your license fee.* We are InterSystems, 


a global software company with a trac rd of innovation for more than 25 years. 


InterSystems 


ENSEMBLE 


Request a FREE proof-of-concept project at www.InterSystems.com/Ensemble13A 
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Outsourcing 


® Nov. 10, Chicago | 
Sponsor: The Outsourcing Institute | 
Reality Outsourcing: Real People, Real | 
Stories includes presentations on 
adapting to change, best practices in 
action, postcontract challenges, out- 
sourcing relationship management, 
and offshore trials and tribulations. 
www.outsourcing.com/ 
roadshow2005/ 


Business 
Transformation 


@ Nov. 15-16, Boston 

Sponsor: Forrester Research inc. 
Enabling Business Model Transforma- 
tion: IT's Strategic Role in Driving Glob- 
al Competitiveness includes tracks 

on business model transformation for 
global competitiveness, IT's business 
transformation role and new technol- 
ogy architectures to support business 
transformation. It also covers aligning 
IT investments for growth, developing 
IT frameworks to support global ex- 
pansion, retooling the IT budget to 
boost innovation, and marketing IT 
www.forrester.com/esf2005 


Security 


® Nov. 17-18, New York 

Sponsor: The Conference Board Inc. 
The 2005 Corporate Security, Busi- 
ness Continuity and Crisis Manage- 
ment Conference will address topics 
such as corporate crime and corrup- 
tion; nuclear, chemical and biological 
threats; designs to link IT and physical 
security; homeland security and the 
corporation; natural and random disas- 
ters; and strategic communications. 
www.conference-board.org/ 
conferences 


Content 


Management 


@ Nov. 29-Dec. 1, Boston 
Sponsor: Lighthouse Seminars LLC 
The Gilbane Conference on Content 
Mana’ nologies includes 
tracks fc managers, content 
technologists, marketing managers 
and business and compl > man- 
agers, as well as prese ns on 
strategic issues. 
www.lighthouseseminars.com 


_ MANAGEMENT 


PAUL GLEN 


www.computerworld.com 


Youre Fired! 


HILE DONALD TRUMP may issue 
these words with mock sadistic 
glee, most of us with a tad of com- 
passion struggle with uttering the 
phrase, “You're fired.” And it’s 


right that we should. 


In the popular press, when we hear about firings, it’s 
usually from the perspective of the fired person rather 
than the boss. The person doing the firing is variably 
portrayed as the steely, callous automaton, the bad guy 
or sometimes the cruel, sadistic, power-hungry heavy. 


In truth, most bosses are 
none of these things. They 
agonize over the decision 
to fire someone, and even 
after making that decision, 
they suffer bouts of guilt, 
depression, sleeplessness 
and fear. The whole experi- 
ence is more than unpleas- 
ant and sometimes even de- 
bilitating for the manager 
who has to do the deed. 

But bosses get no sympa- 
thy for the emotional tur- : 
moil that goes with the job. 7% 2 
When it comes to handling 
the negative personal fall- 
out of firings, you’re on your own. 

In my time as a manager, I discov- 
ered that the better prepared I was for 
both the decision to fire and the event | 
itself, the more comfortable — and 
less emotional — I was with what 
needed to be done. 

Over time, I developed two sets of 
rules that helped me prevent many 
of the unpleasant feelings about firing 
someone. 

The first rules governed making 
the decision about whether to fire, and | 
the second guided how to fire. I found | 
that if I followed these rules, I felt 
comfortable that I had done the best 
that I could. 


him at info@paniglen.com. 


| given explicit warnings prior to 
| being fired. 


| have been offered support to help him 


| his job. 


significantly expand or contract 


"WANT OUR OPINION? 





(I’m not sure whether your lawyers 


would agree with all of 
these, but I rarely had the 
advice of lawyers in these 
situations. These rules are 
strictly for peace of mind 
in making the decision, 
not necessarily for free- 
dom from wrongful-termi- 
nation lawsuits.) 





Deciding Whether to Fire 
1. The person being fired 
should never be surprised 
by what’s happening to 
him. 

2. The person being 
fired had to have been 


3. The person being fired had to 
have been advised of specific steps 
he needed to take to keep his job. 

4. The person being fired had to 


learn what he needed to learn to keep 


5. The person being fired had to 
have been given a reasonable period 
of time to comply with your expecta- 
tions. The nature of the employee’s 
response to the offer of help could 





| 


what’s considered a reasonable 
period of time. 
6. Illegal behavior or actions open- | 





| ing the company to significant legal 


risk could nullify all the other rules. 
If someone was involved in illegal 
activities related to work or actions 
that could be considered sexual ha- 
rassment, he wouldn’t deserve the 


| same degree of help and warnings that 
| others get. 


Carrying Out the Decision to Fire 

1. Never delegate the dirty work. If I de- 
cided to fire someone, I had to be willing 
to look him in the eye and tell him so. 

2. The meeting should be face to 
face. No phone, fax, e-mail or IM. 

3. Keep it short. The meeting 
should last no more than five minutes. 
There’s no reason to drag out 
something that’s so painful for 
the employee. 

4. Use simple, factual, nonaccusato- 
ry language. “I’m sorry to inform you 
that today will be your last day with us 
at XYZ Corp.,” instead of, “You just 
aren’t pulling your weight.” 

5. Don’t go into the reasons for the 


| dismissal. Since it shouldn’t be a sur- 
| prise, he already knows what the prob- 
1 


lem is. 

6. Don’t answer any questions about 
the decision or the performance of the 
person being fired. The time for that 
has passed. Your answers won't be 


| heard anyway. Questions about the 


mechanics of exit should be referred 


| to someone else. 


7. Have another person handle the 
details of the exit. The last thing that 
the fired person wants is to spend the 


| next half an hour with you going over 
| . . 
| the minutiae of last paychecks and 


insurance. 
While firing staff is among the most 


unpleasant things that a manager must 
| do, with a structured approach, the 
| discomfort for everyone involved can 


be minimized. @ 57618 


For more columns and links to our archives, go to 
www.computerworld.com/opinions 
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Opportunity 
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Zag 


Check back 
weekly for 
fresh job listings 
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by top companies 
looking for skilled 
IT professionals 


like you! 


IT|careers 
800-762-2977 





Calif based IT co has openings 
at its Torrance, CA and Chicago. 
IL ofcs and at unanticipated 
client sites across the US for 
Software Eng, Progrmmr. Analysts. 
Project Leader/Mgr., Biz Dvipmnt. 
Consultants and Biz Analysts 
Responsible for custom program 
development and implementa- 
tion and system analysis and 
design. Will provide software 
support to clients that includes 
testing, debugging and modify- 
ing software. Bach degree req'd 
Mail resumes to RJT Compuquest 
Inc., 23430 Hawthome Bivd., #305 
Torrance, CA 90505, Attn: HR 


Sage IT seeks Sr. data ware- 
housing architect, system ana- 
lyst, IT manager to customize 
applications using Data Marts 
Design/Modeling, ERP, Busin- 
ess Objects, Cognos, Informatic. 
Oracle. Travel required. Min. MS 
in computer science or BS 1-5yr 
exp. Contact hr@sageitinc.com 
EOE 


Corpus, Inc. has multiple open- 
ings for IT professionals to 
design and develop applications 
using Oracle, SAP, SQL, PL 
SQL, COBOL, C/C++, VB, Java, 
XML, ERP, ASP, NT, XSL. Min 
MS/BS with exp. Travel maybe 
required. Please send resumes 
to resumes@corpusinc.com 
EOE. No cails 


Software Engineer - Business 
Solutions. Analyze software to 
det. feasibility of design for 
business, technology based 
solution. Analyze specific in- 
put/output. Tools: JAVA, Put- 
nam, Function Point Metric 
System, GUI, UNIX as OS, Ab 
Initio, C/C++, SQL, Oracle 
Req. MCS w/1 yr. exp. or 
Software engineer in cost es- 
timation project. Send resume 
to R. llapavulur, Mascon Glo- 
bal, 1699 E. Woodfield Rd., 
#200, Schaumburg, IL 60173 


EDS is looking for an informa- 
tion Specialist in its Seaside, CA 
location to conceptualize, de- 
sign, construct, test and imple- 
ment business and technical 
information technology solutions 
through application of software 
development life cycle method- 
ology. Requires Bachelors de- 
gree in Computer Science or 
Engineering Technology and 
one (1) year of experience in de- 
signing and building web appli- 
cations using Rational Rose 
J2EE, EJB, RMI! and Oracle. 
Submit resume to Pankaj Patel 
Product Manager, EDS, 400 
Gigling Road, Seaside, CA 
93955, in reference to 1115-J 


Global Tech & Resourc- 
es seeks Applications 
Software Engr to re- 
view, program & com- 
pile apps. BS Comp 
Sci/Engr or academic 
Equiv & 1 yr exp w/ 
Microsoft DNS, WINS & 
DHCP; MCSE, PMP, 
CCNA & CNA certs 
req'd. Resume: 701 E 
Irving Pk Rd, Ste 302, 
Roselle, IL 60172. 


Systems and Operations Spec- 
talist, Strategic Sourcing sought 
by Novartis Pharmaceuticals 
Corporation for East Hanover. 
NJ office. Must pc Mas- 
ter’s degree in Busi . 
istration/E-Busine: 
experience in 
design and analysis v 
pharmaceutical indt 

with Ariba Buy 


required. Respond to 
O'Rourke, Human Re 
Dept., Requisit 
Heaith Piaza 

Hanover, NJ ( 

an EOE Employer. 


Software Engineer. Develop 
and maintain software algo 
rithms for image Analysis, Pat 
tern Recognition, Decision Mak- 
ing and other related intelligent 
processes. Perform system 
level object-oriented program- 
oft Windows 
application 
software for the company's X- 
ray inspection systems. Require 
a M.S. in computer science or a 
related field plus 1 related 
exp. Apply to: YesT 
1317 Cailes 
Clemente, CA 92673 
Owen Sit 


Director of Portland Office 
sought to manage and devel- 
op business strategy. Mas- 
ter's degree or foreign or func- 
tional equivalent in Computer 
Science, Engineering or Bus 
iness related field and mini- 
mum 1 yr. experience in job 
offered or technical consulting 
field. Excellent benefits and 
salary commensurate with 
experience. Send resume to 
Recruitment Coordinator, Ref 
Code ORco, 4400 Campbells 
Run Road, Pgh., PA 15205: 
EEO/AAP/M/F/V/H 


Computer: Sr eloper w 
Masters or Fore 
Engg Sci or Comp. Sci or Math 
& tyr exp. to design/dvip n-tier- 
ed distributd applicatns intended 
for multi platfrm browser deliv 
that has Java applets on the 
client side (Java Swing), J2EE 
componnts, Struts framework 
MS SQL Server & Firebird Ser- 
ver on the servr side D data 
migratn utilits using Java & ORM 
Tool Hibernate. Implemnt securi- 
ty using Obfuscation (DashO) & 
Code signing using VeriSign 
Digital Signature. Resumes 
Taylor Assoc Comm, Inc., 200-2 
E 2nd St, Huntington Station, NY 
11746. Job loc.: Huntington Stn 
NY. 


equiv. in 


Software Engineer: 
Software Quality Leaders, 
Inc. plan, design, devel- 
op, test, and document 
software. Resume to 
Attn. HR. 3150 De La 
Cruz Bivd., #138, Santa 
Clara, CA 95054 or email 


openjobs@softq!.com 


Computer and Information 
Systems Manager - devel- 
op, analyze, enhance, modi- 
fy, implement and administer 
state of the art computer 
systems. Train in use and 
Capability of computer sys- 
tems. Direct system support 
during testing, development 
and operations. Customize 
software solutions per reqts 
of business clients. Refer to 
Job # CSI-01, and reply to 
jobs@avocausa.com or mail 
to Avoca LLC, 555 Howard 
Street, 201, SF, CA 94105 


EDL Consulting, 
ltd in Wilmette, IL 
seeks Comergent 
software engineer 
w/ M.S. and Co- 
mergent certifica- 
tion. Send res: 
trrecruitment@ 
yahoo.com or fax 
802/609-7567. 


Personnel Manager (Technical), 
Recruiters sought to recruit 
interview, select information 
technology professionals to fill 
vacant positions. Master's de- 
gree or foreign or functional 
equivalent in Computer Science. 
Engineering or Business related 
field and minimum 1 yr. experi- 
ence in job offered or technical 
consulting field. Excellent bene- 
fits and salary commensurate 
with experience. Positions avail- 
able nationwide. Send resume 
to: Recruitment Coordinator 
Ref. Code ORco, 4400 Camp 
bells Run Road, Pgh., PA 
15205; EEO/AAP/M/F/V/H 


Sr. Software Engineer needed w 
Masters or foreign equiv in Comp 
Info Systms or Comp Sci or Engg 
& ‘tyr exp to research, dsgn 
dvip, analyze & test comp S/W 
systms, client server & object ori 
ented applics using Java, JSP. 
Serviets, Oracle, MS Access 
Apache Tomcat, Cyrstal Reports 
& UML on Windows & Unix (Red- 
Hat Linux) operating systms. 
Formulate & dsgn S/W systm 
using scientific analysis & mathe- 
matical models to predict & mea. 
sure outcome & consequences 
of dsgn. lyr exp as S/ware Engr 
is acceptable. Mail resumes to: 
KGF Associates, Inc., 777 Wash- 
ington Rd, Ste 1, Parlin, NJ 
08859. Job Loc: Parlin, NJ or any 
unanticipated locs in USA 


Software Engineer utiliz- 
ing object oriented 
methodologies & C# 
consistent with CMM 
(Capability Maturity 
Model). Mail to Sierra 
Metrics Inc. 2820 10th 
Street, Sacramento, CA 
95818 or fax to (866) 


585 4628 
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Florida Opportunities 


Datatel 


Systems Administrator 


Systems Engineer 


Positions available at 
Hillsborough Com 


College —Tampa, Florida 


Required Skills 


e Datate! Colleague 


jata 


Email Resumes: (Word format) 


er Stannard 
nt Manager 


Computer/Banking Information 
Systems Managers Needed 
Capital Consuitar 
Inc.(CCS), an e: 
ial and banking consulting 
Ss in need of Computer/ Ban 
Information Systems Managers 
to oversee implementation US: 
tomization and support of finan 
cial and bankinc mputer infor 
mation systems. ideal candi 
dates will have a Master's 
degree in computer science or 
engineering and ex ence with 
banking application software 
such as PROFILE and MUMPS 
We will consider applicants with 
a Bachelor's 
cant industry experience. Posi 
tions based in Wa PA and 
may require temporary reloca 


ree and signifi 


tion to various client sites 
throughout the United States 
and countries abroad. Qualified 
candidates should mail resumes 
to: HR Department, CCS 
Devon Park Drive, Building 500 
Wayne, PA 19087 


Senior Analyst/Developer 
Goldman, Sachs & Co., New 
York, NY. Provide solutions to 
business problems & translate 
functional requirements into 
technical specifications & de 
sign. Required: Masters in Com- 
puter Science, Computer Engin- 
eering or related field plus 3 yrs 
exp in offered position or as a 
Systems Analyst, or Bachelor's 
degree in Computer Science 
Computer Engineering or relat 
ed field plus 5 yrs exp in offered 
position or as systems analyst 
Prior exp must ii utilizing Java 
PERL & ORACLE & Sybase 
relational databases & project 
management skills through the 
complete project life cycle. Job 
Code: TECHO82505SAD. Apply 
online: https://goidmansachs 
recruitmax.com/eng/candidates 
using "Build Your Profile" option 
Candidates must provide job 
code in "Specific Type” field. NO 
PHONE CALLS PLEASE 


Engineering Analyst/Program 
mer (Melville, NY). Design & 
dev automated engg app, maint 
& operat'n of computerized 
scheduling sys., dev on-line app 
prog’s update, generate/ana- 
lyze reports through diff visual 
formats, using MS Project serv- 
er, MS Project, Primavera, SQL 
Visual Basic, Open Plan 
Maximo, Cr i Report, dBase 
& AutoCAD. BS or equiv in any 
Engg, Comp Sci, or related, + 5 
yrs rel exp. Resume to: Lehigh 
Power Engineering, 1121 Old 
Walt Whitman Rd., Ste 202 
Melville, NY 11747 


HILLSBOROUGH 


Community College 


s aN. 
comp. with 


We have r 


with Bach + 
ERP/CRM 
iesoft 


informatica, BO 
rostrateg 
(Job #GA2 
Bus. Appin/Prog. 
VB/ASP._NET 
J2EE/JAVA, ODBC 
C++, VC++, C#, PL/SQL 
Forms, RDBMS, V 
Sphere. (Job#GA3 
Admin/Network: Unix, Solaris 
HP. AIX, Linux, Win NT/200C 
Cisco, VoIP, LAN/WAN/SAN 
SNMP. Novell. (Job#GA4 
DBA Sybase/SQL/Essbase. 
DB2/Oracle (Job#GA5 
Frequent travel tc It sites re 
quired for above positions 
We also have positions open for 
Research/Bus. Analyst 
ruiter at our NJ loca 
Job#GA6 


Mast or equi yr exp reqd for 


Send resume to cyberThink Inc 
25 US Highway 22 West, Brid. 
water, NJ 08807, Attn: (job # 

Specify the skills which you 
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SQL Server 


databases of market leaders 
Oracle Corp. and IBM within a 
year. Long & Foster plans to 
begin using a production ver- 
sion of the database in the 
spring, when the real estate 
company is due to launch a 
new version of its corporate 
Web site. 

SQL Server 2005 supports 
database encryption and other 
new security features, as well 
as full-text search, 
native storage and 
querying of XML 
documents, and 
added business in- 
telligence function- 
ality (see story at 
right). The database 
is also integrated 
with Visual Studio 
2005, which lets de- 
velopers write appli- 
cations in C# or 
Visual Basic instead 
of doing SQL pro- 
gramming. 

Mediterranean 
Shipping Co., a 
Geneva-based company that 
operates container ships, is al- 
ready running the new data- 
base on production systems. 
As part of Microsoft’s Tech- 
nology Adoption Program 
[QuickLink 57875], Mediter- 
ranean Shipping beta-tested 
SQL Server 2005 for nearly a 
year before going live with the 
Enterprise edition several 
months ago. 

Fabio Catassi, the shipping 
company’s chief technical of- 
ficer, said end users experi- 
enced a “dramatic reduction” 
in the time needed to run 
queries after Mediterranean 
Shipping upgraded to a 64-bit 
version of SQL Server 2005 
running on a Unisys ES7000 
server. The performance gains 
were also a result of high- 
availability features such as 
the database’s online index- 
rebuilding capability, he said. 

SQL Server 2005 doesn’t 
have everything Catassi is 
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looking for. Some promised 
capabilities, most prominently 
database mirroring for auto- 
matic backups of information, 
aren’t due to be available until 
next year. Meanwhile, his per- 
sonal wish list still includes 
features such as the ability to 
load and compare multiple 
performance monitoring logs 
from different systems. 


Benefit to Developers 
Craig Steele, a senior network 
engineer at Progent Corp., an 
IT consulting firm in San Jose, 
said the most tangi- 
ble improvements in 
SQL Server 2005 
likely will benefit 
developers more 
than database ad- 
ministrators. For ex- 
ample, he pointed to 


database with Visual 
Studio 2005, which is 
also being launched 
this week. 
“Developers will 
be happy with the 
new SQL Server, but 
if you’re an IT pro- 
fessional, whoop- 
dee-doo-dah-day,” said Steele, 
who consults with corporate 


| users on projects involving 


SQL Server and Microsoft’s 
Exchange Server. 
Steele added that he doesn’t 


| view the new release as a huge 


shift in technology from its 
SQL Server 2000 predecessor. 
“I know pure SQL [Server] 
people will love it,” he said. 
“I’m just not sure about the 
rest of the world.” 

Raichura said the support 
for Microsoft’s Common Lan- 
guage Runtime technology via 
Visual Studio will let him 
avoid having to go to multiple 
developers with different spe- 
cialties. “I can natively write 
stored procedures straight 
into software,” he said. “This 
increases my resource pool 
because it reduces the distinc- 
tion between software devel- 
opers and architects.” 

Kirk Pothos, a software de- 
velopment manager in Xerox 


the integration of the 








Corp.’s printer service divi- 
sion, called Visual Studio 2005 
“a huge step forward” for Mi- 
crosoft. He added that his 
team has already upgraded to 
the new versions of both SQL 
Server and Visual Studio. 
Robert Hurlbut, an indepen- 


| dent software consultant in 
| Worcester, Mass., said SQL 


Server 2005’s security features 
are a big improvement over 
what was in the previous re- 
lease of the database, especial- 
ly for government users and 
companies in the health care 
and financial services indus- 
tries. Microsoft has “locked 


| down the ports and turned 

| things on automatically that 
| you used to have to do by 

| hand,” Hurlbut said. 


DesignMind Inc., a software 
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development firm in Oakland, 


| Calif., has been using “a nar- 


row set” of SQL Server 2005’s 
features in live applications 
for several months, said Mark 
Ginnebaugh, the firm’s presi- 
dent and head of the San Fran- 
cisco SQL Server User Group. 
Now DesignMind is moving 


forward on more extensive 


| projects, such as using SQL 

| Server 2005 to set up a large 

| data mart for one client, Gin- 

| nebaugh said. Doing that on 

| top of the client’s existing DB2 


database “would have been far 


| more costly and difficult,” he 
| added. @ 58005 


Users Look to Database for Business Intelligence Apps 


MICROSOFT USERS last week 
said they're pinning their hopes 
for future business intelligence 
projects on new SQL Server 
2005 features designed to boost 
performance and ease end 
users’ reliance on IT staffers. 

The new version of the data- 
base adds enhanced features for 
building and managing data inte- 
gration processes, analyzing BI 
data and building reports, Micro- 
soft said. 

Mayur Raichura, managing di- 
rector of information services at 
The Long & Foster Cos. in Fair- 
fax, Va., said he hopes the new 
Analysis Services feature in SQL 
Server 2005 will allow him to 
analyze data about customers 
who use the real estate compa- 
ny's Web site and then proac- 
tively provide them with data 
tailored to their needs. 

The analysis features in the 
previous SQL Server 2000 ver- 
sion didn't scale well enough to 
handle such tasks, he added. 

The new analysis tools in SQL 
Server 2005 are designed to in- 
tegrate online analytical process- 
ing and relational reporting to 
help users spot correlations and 


patterns in data mining applica- 
tions, according to Microsoft. 

Barnes & Noble Inc. has been 
migrating its data warehouse 
from SQL Server 2000 to the 
new release since June, said 
Chris Troia, CIO at the New York- 
based retailer. 

The data warehouse, which 
holds about 4TB of sales and in- 
ventory data, will grow to 14TB 
within a year, he added. 

One of the biggest advan- 
tages of SQL Server 2005, Troia 
said, is better-performing ex- 
tract, transform and load tools. 

The tools, which are part of 
the new version's Integration 
Services, offer improved perfor- 
mance and management capa- 
bilities, Microsoft said, adding 
that users shouldn't have to buy 
enterprise-class data integration 
tools. 

Eliot Gardener, a project man- 


ager at Barnes & Noble, noted 


that SQL Server 2005 requires 
developers to write fewer scripts 
and less code to access data. 

In January, Barnes & Noble 
plans to begin using the produc- 
tion release of Report Builder, a 
new tool in the database de- 


signed to allow nondevelopers 
to create and publish BI reports. 

Now, developers must do a lot 
of hand coding to develop front- 
end presentations for reports, 
according to Troia. Using the 
beta of the Report Builder soft- 
ware, developers are writing the 
presentation in about a half- 
hour, slashing a day or two from 
the previous report-development 
process, he said. 

Chris Alliegro, lead analyst 
at independent research firm 
Directions on Microsoft in Kirk- 
land, Wash., said the BI capabili- 
ties in the database give Micro- 
soft access to new markets. 

“Their BI platform gives them 
an opportunity to get their foot in 


> the door even at companies who 
aren't using SQL Server as their 
- database management plat- 


form,” he said, noting that the Bi 


: technology can work with non- 


Microsoft data sources. 

Microsoft “may not displace 
Oracle or IBM as the core enter- 
prise database engine,” Alliegro 
said, “but they can sell licenses 
for analysis of data and data in- 
tegration.” 

- Heather Havenstein 
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ut of the Loop 


U’VE SEEN THEM BEFORE — news stories or ads 
pushing yet another code generator that “anyone can 
use to create real applications.” Infuriating, aren’t they? 
The basic pitch is always the same: Business users can 
build their own applications, cutting the IT department 

out of the process and thus saving time, money and misery. 

Yeah, it’s insulting. It strokes users’ egos and plays on prejudices 
against those uncooperative, obstructionist control freaks in IT with 
their requirements processes and long pipelines and technospeak 
about why they didn’t deliver what users wanted. 

But don’t get mad. After all, what exactly do you stand to lose? 


Think about it: You’ve always had users who 
built their own applications, at least as long as 
there have been desktop computers. Users 
wrote them in Basic, as batch files, with 
macros, with personal database programs. Most 
of all, they wrote them in the most powerful 
user-oriented development environment ever 
created: the electronic spreadsheet. 

Those user-built applications became useful. 
Other users got copies. Pretty soon, the inge- 
nious spreadsheet hack that worked so well for 
a power user and a few friends spread through 
a whole department and beyond — and hit a 
wall. The network bogged down, or the data- 
base server groaned under the load, or the data 
users wanted wasn’t easy to import. 

And that’s when IT was brought in to make 
this user-built monstrosity more scalable and 
interoperable — in other words, to turn it into 
a real application. 

See? There’s nothing new to the idea of 
cutting IT out of the software development 
process. Users have always cut you out of the 
loop — until there’s a problem. Then they want 
you to make it work. 

And in the midst of trying to pick 
through spaghetti code or badly 
formed macros or impenetrable 
spreadsheet formulas, it’s easy to 
lose sight of what users have actual- 
ly done: relieved you of some of the 
hardest parts of app development. 

When users build their own 
working software, you don’t have to 
pry out of them what it is they want. 

You don’t have to wonder whether 
they’!l find an application useful. 
You don’t have to guess about the 
business process or tinker with look 


and feel or experiment with prototypes. 

You've got the prototype. It may be the messi- 
est sketch of an application you’ve ever seen, 
but it is what users are asking for. That you can 
be sure of. 

So the heavy lifting of requirements collec- 
tion, prototyping, user acceptance — that’s al- 
ready been done for you. All you have to do is 
produce a cleaner, more scalable and interoper- 
able clone of what users have already defined, 
accepted and enhanced. That’s the sort of thing 
you're good at, right? 

Wait, it gets better. You may not even have to 
do that. Sometimes you can clear bottlenecks in 
these user hacks with a few stored database 
procedures or precalculated values. A little 
back-end work, and suddenly the database and 
network load drops. Sure, the user-built appli- 
cation is as ugly as ever. But now it’s ugly and 
scalable — and done almost overnight, instead 
of at the end of a long development project. 

In other words, with user-built apps, you 
have more options, a better understanding of 
the need, guaranteed user involvement and 

management support, a high likeli- 
hood that you'll deliver a winning 
application — and plenty of credit 
for IT and users to share when the 
project is a success. 

So don’t get mad at software 
marketing bozos who goad users 
to cut IT out of the loop. Let users 
build their little apps. They’ll cut 
you out of the loop, all right — just 
long enough to take the riskiest 
and most miserable slice of the 
job off your hands. 

Think you can bear to lose that? 
@ 57968 
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Given how hot and slow our competitor’s servers are, it’s no surprise their name 
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THE NEW INDUSTRY STANDARD x64 SERVERS FROM SUN. ee ee 
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Check out our cool new industry standard x64>servers 
powered by AMD Opteron’ processors. They run Solaris 


(our favorite), Windows and Linux. Visit sun.com/better. 
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buy even 
less later. 


No commitments. No obligations. A half hour is all we need to 
demonstrate how Pillar Axiom™ drives down networked storage 
costs. By combining SAN and NAS into one system, it dramatically 
reduces administration and support. With top-tier performance and 
scalability on a single software license, it eliminates unexpected 
use Our storage system can often be installed for less 
npanies’ storage maintenance budgets, it can really 
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ind everything to gain by hearing our 
storage. Call 1-877-252-3706 
t www.pillardata.com/less 


Learn the truth about networked storage. 


Get your FREE subscription 
to AXIOM Journal 








